fetchmail and ssl certificates
Ranjan Maitra <[email protected]>
| Newsgroups | gmane.mail.fetchmail.user |
|---|---|
| Organization | Mailbox Ignored |
| Message-ID | <[email protected]> |
Hi,
Here is my .fetchmailrc
set daemon 301
poll pop.gmx.com
protocol POP3
service 995
authenticate password
user "[email protected]"
ssl
sslfingerprint "5C:6B:60:FE:80:97:0B:13:EB:36:A3:66:48:28:7A:61:5E:B2:25:DA"
mda 'procmail -d %s'
keep
So, it worked fine till last night, but since this morning, this has not been working. Here is what I get:
$ fetchmail -c
fetchmail: pop.gmx.com fingerprints do not match!
fetchmail: OpenSSL reported: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
fetchmail: pop.gmx.com: SSL connection failed.
fetchmail: socket error while fetching from [email protected]@pop.gmx.com
Here is how I verified my fingerprint:
~$ openssl s_client -servername gmx.com -connect pop.gmx.com:995 | openssl x509 -fingerprint -noout
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
verify return:1
depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mout.gmx.com
verify return:1
SHA1 Fingerprint=5C:6B:60:FE:80:97:0B:13:EB:36:A3:66:48:28:7A:61:5E:B2:25:DA
Any suggestions as to what I am doing wrong?
I am on F32 (fully updated) which has fetchmail-6.4.1 and openssl-1:1.1.1g.
Many thanks,
Ranjan