Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 15 Aug 2010 15:35:02 -0700 (PDT)
From:      Dan Strick <mla_strick@att.net>
To:        freebsd-questions@freebsd.org
Cc:        mla@mist.nodomain
Subject:   Re: fetchmail ssl certificate verification problem in FreeBSD 8.1
Message-ID:  <201008152235.o7FMZ2X2049722@mist.nodomain>

next in thread | raw e-mail | index | archive | help
On Sun, 15 Aug 2010 22:36, Erik Norgaard wrote:

> A little bit of searching around I found this (I don't know since when):
>
> # less /usr/src/crypto/openssl/certs/README.RootCerts
> The OpenSSL project does not (any longer) include root CA certificates.
>
> Please check out the FAQ:
>    * How can I set up a bundle of commercial root CA certificates?
>
> The FAQ is here:
>
> /usr/src/crypto/openssl/FAQ

That explains the problem.
I copied the file /usr/local/share/certs/ca-root-nss.crt from my old
FreeBSD release-8.0 system and hooked it up to fetchmail with the
fetchmail sslcertfile option.  At least fetchmail is now happy.

Thanks for the help,
Dan Strick



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201008152235.o7FMZ2X2049722>