[Eisfair] fetchmail mit ssl

Steffen Gumpert segm at gmx.de
Di Dez 31 12:09:27 CET 2013


> hatte das gleiche Problem. Versuch es mal mit Rechten 777 im  
> Zertifikateverzeichnis...Bin gespannt, ob das bei Dir auch hilft!

nicht wirklich. Hätte mich auch gewundert, da fetchmail als root läuft.
Aber interessanterweise bekomme ich seitdem andere Fehlermeldungen:

fetchmail: Server certificate verification error: self signed certificate  
in certificate chain
fetchmail: Missing trust anchor certificate: /C=ZA/ST=Western Cape/L=Cape  
Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte  
Premium Server CA/emailAddress=premium-server at thawte.com
fetchmail: This could mean that the root CA's signing certificate is not  
in the trusted CA certificate location, or that c_rehash needs to be run  
on the certificate directory. For details, please see the documentation of  
--sslcertpath and --sslcertfile in the manual page.
fetchmail: OpenSSL reported: error:14090086:SSL  
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
fetchmail: SSL connection failed.
fetchmail: socket error while fetching from xyz at pop.gmx.net
fetchmail: Query status=2 (SOCKET)

fetchmail: Server certificate verification error: unable to get local  
issuer certificate
fetchmail: Broken certification chain at: /C=ZA/ST=Western Cape/L=Cape  
Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte  
Premium Server CA/emailAddress=premium-server at thawte.com
fetchmail: This could mean that the server did not provide the  
intermediate CA's certificate(s), which is nothing fetchmail could do  
anything about.  For details, please see the README.SSL-SERVER document  
that ships with fetchmail.
fetchmail: This could mean that the root CA's signing certificate is not  
in the trusted CA certificate location, or that c_rehash needs to be run  
on the certificate directory. For details, please see the documentation of  
--sslcertpath and --sslcertfile in the manual page.
fetchmail: OpenSSL reported: error:14090086:SSL  
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
fetchmail: SSL connection failed.
fetchmail: socket error while fetching from xyz at pop.1und1.com
fetchmail: Query status=2 (SOCKET)

Die certificate chains sind laut /var/install/bin/certs-show-chain
immernoch in Ordnung und gehasht.

Gruß, Steffen.


Mehr Informationen über die Mailingliste Eisfair