public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
* fetchmail and openssl
       [not found] <4F986152.5000700@gmail.com>
@ 2012-04-25 20:59 ` Vladimir Shatilo
  0 siblings, 0 replies; only message in thread
From: Vladimir Shatilo @ 2012-04-25 20:59 UTC (permalink / raw)
  To: cygwin

In the latest cygwin package fetchmail 6.3.18-1 has been compiled with old openssl 0.9.8 library.
This causes errors in ssl certificate validation when connecting to imap or pop3 with ssl.
The problem is openssl 1.0.0 and later has different hash generation algorithm then previous 0.9.8 version.
So after c_rehash symbolic links to valid certificates have different names then fetchmail is looking for.

First I have verified it with strace and have got symbolic link names of certificates that fetchmail is looking for.
I created symbolic links with valid names (according to openssl 0.9.8 hashes) to existing certificates and fetchmail has worked well.

Finally I have compiled fetchmail 6.3.21 from source with openssl 1.0.1a-1 library and have got everything working as required.

So this is required to update fetchmail to 6.3.21 and compile it with latest openssl 1.0.1a-1 library in the main cygwin package.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2012-04-25 20:59 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <4F986152.5000700@gmail.com>
2012-04-25 20:59 ` fetchmail and openssl Vladimir Shatilo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).