On Sun, Oct 24, 2010 at 09:10:44 -0600, Joseph wrote:
> I just commented out the lines:
> sslcertck
> sslcertpath /etc/ssl/certs/
>
If you disable the "sslcertck", then fetchmail won't abort the
connection if the certificate validation fails. In other words, if
someone does trick your
On 10/24/10 07:33, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 22:23:37 -0600, Joseph wrote:
Yes, it works with all options now:
...
ssl
sslproto 'TLS1'
sslcertck
sslcertpath /etc/ssl/certs/
Right, but I'm wondering if the "sslcertpath /etc/ssl/certs/" line is
On Sat, Oct 23, 2010 at 22:23:37 -0600, Joseph wrote:
>
> Yes, it works with all options now:
> ...
> ssl
> sslproto 'TLS1'
> sslcertck
> sslcertpath /etc/ssl/certs/
Right, but I'm wondering if the "sslcertpath /etc/ssl/certs/" line is
even needed; that directory should just b
On Sat, Oct 23, 2010 at 12:57:39 -0600, Joseph wrote:
> I used this command to obtain the certificates:
> openssl s_client -connect pop.gmail.com:995 -showcerts
>
> So I assumed the top certificate is Google
> the bottom one is Equifax
> Can anybody verify it? Someone suggested that the bottom one
glad you got it working Joseph.
pgphR3kVlAaUf.pgp
Description: PGP signature
* Joseph [2010-10-23 22:42 -0600]:
It wasn't the certificate problem, I think it was fetchmail was missing some
links or options.
I re-compile fetchmail, openssl and the problem is solved. All is
working, as it should.
Problem solved. Congratulations.
Breen
--
Breen Mullins
b...@sdf.org
On 10/23/10 21:39, Breen Mullins wrote:
* Joseph [2010-10-23 21:35 -0600]:
What is causing the problem is the: sslcertck
If I comment it out, it keep complaining about the certificate but connection
goes through.
So you can either comment out sslcertck and move on (perfectly
reasonable, I
* Joseph [2010-10-23 21:35 -0600]:
What is causing the problem is the: sslcertck
If I comment it out, it keep complaining about the certificate but connection
goes through.
So you can either comment out sslcertck and move on (perfectly
reasonable, I think) or try to fix this.
If you wan
On 10/24/10 00:05, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 21:56:51 -0600, Joseph wrote:
I'm using openssl-1.0.0a-r3
I rebuild openssl, all hashes were rebuild, in addition I've reinstall
"fetchmail" and I think this solved the problem.
When I pull the mail I no don't get any c
On Sat, Oct 23, 2010 at 21:56:51 -0600, Joseph wrote:
> I'm using openssl-1.0.0a-r3
>
> I rebuild openssl, all hashes were rebuild, in addition I've reinstall
> "fetchmail" and I think this solved the problem.
>
> When I pull the mail I no don't get any certificate errors.
Cool.
Does it work w
On Sat, Oct 23, 2010 at 20:54:39 -0600, Joseph wrote:
> If I comment-out the last two lines:
>sslcertck
>sslcertpath /etc/ssl/certs/
>
> it complains on certificate but I can fetch the mail.
Yes, by removing the "sslcertck" you're letting fetchmail continue with
the session even t
On 10/23/10 19:10, Breen Mullins wrote:
* Patrick Shanahan [2010-10-23 19:37 -0400]:
why do you need it, ie:
poll imap.gmail.com tracepolls with proto IMAP timeout 45
user '@gmail.com' there with password 'passwd' is
'' here options fetchall stripcr ssl
mda '/usr/lib/sendmail -i -oem -f
On Sat, Oct 23, 2010 at 21:00:51 -0600, Joseph wrote:
> I get:
> 578d5c04
> SHA1 Fingerprint=D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A
>
> So this seems to be correct.
Yes, you have the correct fingerprint, but your hash is different than
mine...
>
> It seems to I have them a
On 10/23/10 21:21, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 14:53:42 -0600, Joseph wrote:
> * run "c_rehash ." within that cert directory. That should
> create a symlink named 594f1775.0 pointing to the .pem file.
Though my link was named: 578d5c04.0 -> Equifax_Secure_CA.pem
On 10/24/10 00:07, Jamie Paul Griffin wrote:
I have had this working for ages and I do not have time to think about
it, but I have the equivalent of syscon...@gmail.com, not syscon780 or
syscon...@gmail.com@pop.gmail.com. I also have sslcertck after ssl. I do
not know whether that would help.
F
On 10/23/10 22:48, Jamie Paul Griffin wrote:
if you do download that cert, you would then need to use something like this
command on it:
openssl x509 -in Equifax_Secure_certificate_Authority.pem -fingerprint -subject
-issuer -serial -hash -noout
Then, put it into your ~./certs directory ans r
* Patrick Shanahan [2010-10-23 19:37 -0400]:
why do you need it, ie:
poll imap.gmail.com tracepolls with proto IMAP timeout 45
user '@gmail.com' there with password 'passwd' is
'' here options fetchall stripcr ssl
mda '/usr/lib/sendmail -i -oem -f %F %T'
He's using sslcertck as recomme
On Sat, Oct 23, 2010 at 14:53:42 -0600, Joseph wrote:
> > * run "c_rehash ." within that cert directory. That should
> > create a symlink named 594f1775.0 pointing to the .pem file.
>
> Though my link was named: 578d5c04.0 -> Equifax_Secure_CA.pem
That's wierd. What does
openssl x509 -hash
On 10/22/10 23:21, Joseph wrote:
I'm using fetchmail to pull mail from google but lately I've been getting this
error:
fetchmail: Server certificate verification error: unable to get local issuer
certificate
fetchmail: This means that the root signing certificate (issued for
/C=US/O=Google In
> I have had this working for ages and I do not have time to think about
> it, but I have the equivalent of syscon...@gmail.com, not syscon780 or
> syscon...@gmail.com@pop.gmail.com. I also have sslcertck after ssl. I do
> not know whether that would help.
From the info i've read, it definitely sh
On Sat, Oct 23, 2010 at 09:08:52AM -0600, Joseph wrote:
> On 10/23/10 08:53, Harry Strongburg wrote:
>> On Sat, Oct 23, 2010 at 12:15:23AM -0600, Joseph wrote:
>>> fetchmail: socket error while fetching from
>>> syscon...@gmail.com@pop.gmail.com
>> Silly mistake there! :)
>>
>> Fetchmail 'user' re
if you do download that cert, you would then need to use something like this
command on it:
openssl x509 -in Equifax_Secure_certificate_Authority.pem -fingerprint -subject
-issuer -serial -hash -noout
Then, put it into your ~./certs directory ans reshash it. (Thought i'd mention
that, you prob
> Yes, I have this package install, and tried to use dir: '/etc/ssl/certs'
> but it doesn't help.
Sorry, I hadn't checked earlier replies where Nathan had already suggested that
idea. There's a link to the cert you require on Google:
http://geotrust.com/resources/_root_certificates/certificate
On 10/23/10 21:17, Jamie Paul Griffin wrote:
I'm confused. Where do I get: equifax.pem certificate?
I think Gentoo have a ca-certs-type package in thier repository don't they?
'app-misc/ca-certificates'
Surely that would have the equifax certificate you need?
Yes, I have this package
On 10/23/10 16:06, Nathan Stratton Treadway wrote:
[snip]
As I mentioned before, I haven't had to install private copies of the
root CA certificate myself, but as far as I understand the following
should work:
* clear out the files currently in ~/.mutt/cert (you can save them
somewhere els
> I'm confused. Where do I get: equifax.pem certificate?
I think Gentoo have a ca-certs-type package in thier repository don't they?
'app-misc/ca-certificates'
Surely that would have the equifax certificate you need?
pgpczl3AVIzQW.pgp
Description: PGP signature
On Sat, Oct 23, 2010 at 00:15:23 -0600, Joseph wrote:
> I've found this tutorial but it is not working. My certificate is not
> recognized http://www.axllent.org/docs/networking/gmail_pop3_with_fetchmail
Yeah, that writeup appears to be both incorrect (as mentioned in the
comments) and outdated (
On 10/23/10 12:34, Breen Mullins wrote:
* Joseph [2010-10-23 12:50 -0600]:
I'm using command:
openssl s_client -connect pop.gmail.com:995 -showcerts
and it printed out:
copy---
CONNECTED(0003)
depth=1 C = US, O = Google Inc, CN = Google Internet Authority
verify error
* Joseph [2010-10-23 12:50 -0600]:
I'm using command:
openssl s_client -connect pop.gmail.com:995 -showcerts
and it printed out:
copy---
CONNECTED(0003)
depth=1 C = US, O = Google Inc, CN = Google Internet Authority
verify error:num=20:unable to get local issuer certif
On Fri, Oct 22, 2010 at 11:21:22PM -0600, Joseph wrote:
> I'm using fetchmail to pull mail from google but lately I've been getting
> this error:
>
> fetchmail: Server certificate verification error: unable to get local issuer
> certificate
> fetchmail: This means that the root signing certifica
On 10/23/10 11:25, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 09:08:52 -0600, Joseph wrote:
I've removed the domain name, now the line looks like:
poll pop.gmail.com with proto POP3 and options no dns user 'syscon780'
password '' options ssl sslcertpath /home/joseph/.mut
On Sat, Oct 23, 2010 at 09:08:52 -0600, Joseph wrote:
> I've removed the domain name, now the line looks like:
> poll pop.gmail.com with proto POP3 and options no dns user 'syscon780'
> password '' options ssl sslcertpath /home/joseph/.mutt/cert/
>
> but it still complains, certificat
On 10/23/10 08:53, Harry Strongburg wrote:
On Sat, Oct 23, 2010 at 12:15:23AM -0600, Joseph wrote:
fetchmail: socket error while fetching from syscon...@gmail.com@pop.gmail.com
Silly mistake there! :)
Fetchmail 'user' requires you do NOT have a domain-name added onto it.
The domain-name is sup
On Sat, Oct 23, 2010 at 12:15:23AM -0600, Joseph wrote:
> fetchmail: socket error while fetching from syscon...@gmail.com@pop.gmail.com
Silly mistake there! :)
Fetchmail 'user' requires you do NOT have a domain-name added onto it.
The domain-name is supplied at the "poll" argument.
Have fun.
On 10/22/10 23:21, Joseph wrote:
I'm using fetchmail to pull mail from google but lately I've been getting this
error:
fetchmail: Server certificate verification error: unable to get local issuer
certificate
fetchmail: This means that the root signing certificate (issued for
/C=US/O=Google In
»keeper1« sagte am 2002-04-18 um 13:54:08 -0400 :
> the pop3 support? I also use procmail. Any hints will be greatly
> appreciated.
If you also use procmail, then I'd definitaly stick with
fetchmail. This way, you're also independant of the MUA, in case you
ever wish to downgrade to something e
in message <[EMAIL PROTECTED]>,
wrote David Champion thusly...
>
> * On 2002.04.18, in <20020418175408.GA@watcher>,
> * "keeper1" <[EMAIL PROTECTED]> wrote:
> > I have a pop3 mail account. I currently use fetchmail with mutt. Is pop3
> > support built into mutt? Which is better to use with
* On 2002.04.18, in <20020418175408.GA@watcher>,
* "keeper1" <[EMAIL PROTECTED]> wrote:
> I have a pop3 mail account. I currently use fetchmail with mutt. Is pop3
> support built into mutt? Which is better to use with mutt, fetchmail or
> the pop3 support? I also use procmail. Any hints
Mike --
...and then keeper1 said...
%
% I have a pop3 mail account. I currently use fetchmail with mutt. Is pop3
% support built into mutt? Which is better to use with mutt, fetchmail or
% the pop3 support? I also use procmail. Any hints will be greatly
% appreciated.
Although I hear that mutt'
Hi,
On Thu, 31 Jan 2002 Jeremy Blosser spewed into the ether:
[-- snip --]
> You're missing the point. fetchmail is not involved when you use Mutt's
> built in POP fetch-mail function, even though the names are similar. That
> function just brings the mail directly into the folders, it bypasses
On Feb 01, Prahlad Vaidyanathan [[EMAIL PROTECTED]] wrote:
> On Wed, 30 Jan 2002 Knute spewed into the ether:
> [-- snip --]
> > > fetchmail -> MTA -> procmail -> folder(s)
> >
> > > or am I missing something ?
> >
> > What I meant was that when you hit G for the default getmail function
On Thu, May 17, 2001 at 01:55:46AM +0200, Michael Tatge wrote:
> dave hoye muttered:
> > I would like to have fetchmail retrieve my messages from within mutt.
> > This way procmail is able to move the messages to the proper folders.
> > The way I currently have mutt configured, -all- of the mail g
On Wed, May 16, 2001 at 04:31:38PM -0600, dave hoye wrote:
> All,
>
> I would like to have fetchmail retrieve my messages from within mutt. This
> way procmail is able to move the messages to the proper folders. The way I
> currently have mutt configured, -all- of the mail goes to my spool file
Michael Tatge [mutt-users] :
> dave hoye muttered:
> > I would like to have fetchmail retrieve my messages from within mutt.
> > This way procmail is able to move the messages to the proper folders.
> > The way I currently have mutt configured, -all- of the mail goes to my
> You mean like:
> ma
Dave Murray proclaimed on mutt-users that:
> Thank you, that fixed it but now my mail goes to /var/spool/mail/me
> where it was spooling to ~/Mail/inbox. My other folders are in
> ~/Mail/somenames. Is there a convenient way to get the new mail
> in /var/spool/mail/me to ~/Mail/inbox ?
set fol
Wade A. Mosely wrote on mutt-users:
> This is somewhat off-topic; where your mail is delivered is the
> job of the mail delivery agent (MDA) and not that of the mail
> user agent (MUA). For example, if you are using procmail as the
> MDA, as I am, then if you specify a value for $DEFAULT in your
Dave Murray wrote:
> Suresh Ramasubramanian wrote on mutt-users:
> > Something is fubarred with the permissions of /var/spool/mail I
> > expect. Try chmod 777 /var/spool/mail, chmod +t /var/spool/mail
> >
> > And have something listening on port 25 unless you use procmail as
> > your mda ("/
Suresh Ramasubramanian wrote on mutt-users:
> Something is fubarred with the permissions of /var/spool/mail I
> expect. Try chmod 777 /var/spool/mail, chmod +t /var/spool/mail
>
> And have something listening on port 25 unless you use procmail as
> your mda ("/usr/bin/procmail -d %T" should
Dave Murray proclaimed on mutt-users that:
> I'm hopeing that someone that uses fetchmail with mutt can help.
> 1. without [and want mda/bsmtp "/path"] fetch times out while trying to read.
> 2. with [and want mda "/path"] fetch gives a no write permission error.
Something is fubarred with the
I think you would want to install qmail or some other mail system that is setup
to "listen" on port 25 (smtp). That way fetchmail can run the way it was intended.
tw
Le jour Sun Apr 15, 2001 at 03:38:40PM -0700, Dave Murray ([EMAIL PROTECTED]) a
écrit...
> I'm hopeing that someone that use
lt;[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: fetchmail
> User-Agent: Mutt/1.1.2i
>
> On Mon, Feb 07, 2000 at 11:11:45PM +, Edmund GRIMLEY EVANS wrote:
> > mike irwin <[EMAIL PROTECTED]>:
> >
> > > run "fetchmail" at the
On Mon, Feb 07, 2000 at 11:11:45PM +, Edmund GRIMLEY EVANS wrote:
> mike irwin <[EMAIL PROTECTED]>:
>
> > run "fetchmail" at the command prompt, it just hangs up on
> > downloading the first message, and i have to kill it or else it just
> > tries to keep running. fetchmail logs in to the ser
mike irwin <[EMAIL PROTECTED]>:
> i don't know if there is a fetchmail list or not, so hopefully
> someone here can answer my problem. i have been using fetchmail to
> downloads my messages from a POP3 server for a while. but now when i
> run "fetchmail" at the command prompt, it just hangs up on
53 matches
Mail list logo