fetchmail gmail setup problem

[Jude DaShiell]

Hi Henry,

Back again.  I had to reset the clock and do the conversions to pem files 
and run c_rehash.  None of this work had any effect on fetchmail's 
performance though.  The two pem files were found by c_rehash and linked 
this time too.  Could this version of slackware 13.0 fetchmail simply not 
be able to do this yet?On Mon, 7 Feb 2011, Henry Yen wrote:

> Comments in-line.
> 
> On Mon, Feb 07, 2011 at 04:52:31AM -0500, Jude DaShiell wrote:
> > I fixed the sslcertpath in my .fetchmailrc file.  That made no change in 
> > the error I get.
> 
> OK.
> 
> Check that you've got the right certificate from gmail; run this command:
> 
>    echo | openssl s_client -connect imap.gmail.com:993
> 
> > jude at md:~$ lsc/etc/ssl/certs/
> > gmail.crt  google.crt
> 
> I'm not sure of the above command you ran.  If it was actually a listing of
> that directory ("ls /etc/ssl/certs"), then I think the certificate
> conversion step (which may or may not be required) was missing.
> 
> The c_rehash command/script (required by openssl) creates symbolic links
> in the target directory, of certificates it finds, in .pem format.
> 
> Run these two commands (in order) to convert .crt file to .pem file:
> 
>    openssl x509 -in gmail.crt -out gmail.der -outform DER
>    openssl x509 -in gmail.der -inform DER -out gmail.pem -outform PEM
> 
> Also, I noticed that certificate checking requires that "your system clock
> be reasonably accurate".
> 
>