fetchmail and ssl certificates

Ranjan Maitra <[email protected]>
Newsgroups gmane.mail.fetchmail.user
Organization Mailbox Ignored
Message-ID <[email protected]>
Hi,

Here is my .fetchmailrc

set daemon 301
poll pop.gmx.com
     protocol POP3
     service 995
     authenticate password
     user "[email protected]"
     ssl
     sslfingerprint "5C:6B:60:FE:80:97:0B:13:EB:36:A3:66:48:28:7A:61:5E:B2:25:DA"
mda 'procmail -d %s'
keep

So, it worked fine till last night, but since this morning, this has not been working. Here is what I get:

$ fetchmail -c
fetchmail: pop.gmx.com fingerprints do not match!
fetchmail: OpenSSL reported: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
fetchmail: pop.gmx.com: SSL connection failed.
fetchmail: socket error while fetching from [email protected]@pop.gmx.com


Here is how I verified my fingerprint:

~$ openssl s_client -servername gmx.com -connect pop.gmx.com:995 | openssl x509 -fingerprint -noout
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
verify return:1
depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mout.gmx.com
verify return:1
SHA1 Fingerprint=5C:6B:60:FE:80:97:0B:13:EB:36:A3:66:48:28:7A:61:5E:B2:25:DA

Any suggestions as to what I am doing wrong?

I am on F32 (fully updated) which has fetchmail-6.4.1 and openssl-1:1.1.1g.

Many thanks,
Ranjan
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.