[Eisfair] Fetchmail bei T-Online

[Stefan H.]

Hallo,

hat noch jemand anders Probleme beim Mailabruf von T-Online?
Ich habe seit Tagen das hier:

Oct 24 12:25:00 fetchmail: Server certificate verification error: unable 
to get local issuer certificate
Oct 24 12:25:00 fetchmail: Broken certification chain at: 
/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust 
Center/CN=T-TeleSec GlobalRoot Class 3
Oct 24 12:25:00 fetchmail: This could mean that the server did not 
provide the intermediate CA's certificate(s), which is nothing fetchmail 
could do anything about.  For details, please see the README.SSL-SERVER 
document that ships with fetchmail.
Oct 24 12:25:00 fetchmail: This could mean that the root CA's signing 
certificate is not in the trusted CA certificate location, or that 
c_rehash needs to be run on the certificate directory. For details, 
please see the documentation of --sslcertpath and --sslcertfile in the 
manual page. See README.SSL for details.
Oct 24 12:25:00 fetchmail: OpenSSL reported: error:0A000086:SSL 
routines::certificate verify failed
Oct 24 12:25:00 fetchmail: securepop.t-online.de: SSL connection failed.
Oct 24 12:25:00 fetchmail: socket error while fetching from 
xyzxyz at t-online.de@securepop.t-online.de
Oct 24 12:25:00 fetchmail: Query status=2 (SOCKET)

Eigentlich sieht das passende Zertifikat securesmtp.t-online.de.pem doch 
ganz gut aus:

*
| certificate : securesmtp.t-online.de.pem (9e61abb9)
| subject     : C=DE ST=Nordrhein-Westfalen L=Bonn O=Deutsche Telekom AG 
CN=securesmtp.t-online.de
| issuer      : C=DE O=Deutsche Telekom Security GmbH CN=Telekom 
Security ServerID OV Class 2 CA
| MD5 f-print : 13:A6:A5:06:00:20:DD:33:DC:26:27:4A:30:C7:5C:EE
| SHA1 f-print: F0:DC:4E:70:DE:71:A2:2A:A3:82:39:E3:49:75:91:5E:47:CA:CF:8A
|
+->| certificate : telekom_security_serverid_ov_class_2_ca.pem (aea807d1)
    | subject     : C=DE O=Deutsche Telekom Security GmbH CN=Telekom 
Security ServerID OV Class 2 CA
    | issuer      : C=DE O=T-Systems Enterprise Services GmbH 
OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
    | MD5 f-print : BE:FA:B4:7B:50:71:BD:46:03:89:FA:F2:DB:A3:B6:07
    | SHA1 f-print: 
52:86:9C:EF:1A:21:95:C4:16:82:0C:18:3B:80:C9:95:BB:BF:BE:DC
    |
    +->| certificate : t-telesec_globalroot_class_2.pem (1e09d511)
       | subject     : C=DE O=T-Systems Enterprise Services GmbH 
OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
       | issuer      : C=DE O=T-Systems Enterprise Services GmbH 
OU=T-Systems Trust Center CN=T-TeleSec GlobalRoot Class 2
       | MD5 f-print : 2B:9B:9E:E4:7B:6C:1F:00:72:1A:CC:C1:77:79:DF:6A
       | SHA1 f-print: 
59:0D:2D:7D:88:4F:40:2E:61:7E:A5:62:32:17:65:CF:17:D8:94:E9
       |
       +-> end of chain!

checking certificate chain:
* OCSP Response verify OK (cache)
   securesmtp.t-online.de.pem: good
     This Update: Oct 21 18:00:01 2026 GMT
     Next Update: Oct 26 18:00:00 2026 GMT


Viele Grüße
Stefan