Date: Thu, 10 Jan 2013 13:29:14 -0500 From: Greg Larkin <glarkin@FreeBSD.org> To: Paul Kraus <paul@kraus-haus.org> Cc: freebsd-questions@freebsd.org Subject: Re: OpenSSL Certificate issue Message-ID: <50EF087A.50002@FreeBSD.org> In-Reply-To: <EBD01B94-63EF-41A1-A4BC-2F789763AA3B@kraus-haus.org> References: <23C1DB57-7A56-48DC-A0D0-8CF8B1CC8915@kraus-haus.org> <50EEFC7D.5070706@FreeBSD.org> <EBD01B94-63EF-41A1-A4BC-2F789763AA3B@kraus-haus.org>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 1/10/13 12:49 PM, Paul Kraus wrote: > On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote: > >> It looks like you don't have the Gmail certificate installed >> locally, unless I'm mistaken. > > I do not need to have the Google cert installed as long as I have > the Root Cert that signed it installed, and I do have that cert. > The fact that I can point to the certificate file itself and the > test connection works fine shows that I have the correct cert file. > I agree that it is probably NOT installed correctly, but ... > >> Check the instructions here, and let us know if that fixes the >> problem for you: >> http://squeezesetup.wordpress.com/install-mail-part-2-gmail-certs/ > >> > these instructions appear to be for Linux and not FreeBSD and there > are configuration and path differences, which is probably the core > of my problem. I expect that I have not installed the root certs > into the correct directory (but they are in the directory that > c_rehash is working in). > > My guess is that you're using the c_rehash supplied with OpenSSL 1.x (installed as a port?) to hash the certs and then the OpenSSL 0.9.x binary from the base system to connect to the Gmail POP server. Give your s_client command another try with the fully specified path to the OpenSSL 1.x binary to see if that corrects the verification error. Regards, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/cpucycle/ - Follow you, follow me -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (Darwin) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDvCHoACgkQ0sRouByUApDYkQCdEe9DcykLkyzww+0K+UDRqIdC xY8AoMuUMC1xmD2RlaiAQJpya8y/QQp7 =8zRm -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50EF087A.50002>