On 10/23/10 11:25, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 09:08:52 -0600, Joseph wrote:
I've removed the domain name, now the line looks like:
poll pop.gmail.com with proto POP3 and options no dns user 'syscon780'
password 'xxxxxxxxxxxx' options ssl sslcertpath /home/joseph/.mutt/cert/
but it still complains, certificate not trusted.
fetchmail: This means that the root signing certificate (issued for
/C=US/O=Google Inc/CN=Google Internet Authority) is not in the trusted
CA certificate locations, or that c_rehash needs to be run on the
certificate directory. For details, please see the documentation of
--sslcertpath and --sslcertfile in the manual page.
fetchmail: Server certificate verification error: certificate not trusted
What does "ls -l /home/joseph/.mutt/cert/" show?
What OS are you running? Do you have a file Equifax_Secure_CA.pem
anywhere on your system? (It shows up in /etc/ssl/certs on mine, for
example, running Debian... and I'm able to use that directly to validate
Gmail, without needing a private copy of the cert.)
Nathan
ls -l /home/joseph/.mutt/cert/
total 8
lrwxrwxrwx 1 joseph joseph 9 Oct 23 08:49 09cc127e.0 -> gmail.pem
lrwxrwxrwx 1 joseph joseph 11 Oct 23 08:49 17974aab.0 -> equifax.pem
-rw-r--r-- 1 joseph users 993 Oct 22 23:52 equifax.pem
-rw-r--r-- 1 joseph users 1224 Oct 22 23:50 gmail.pem
cat equifax.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
I have above cert in my home directory as listed above.
I'm running Gentoo.
--
Joseph
