DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=eKJqPQZm0X1IH+Rw
	4fsSY84zAVypm3eOThg5g1FBmozRCe+1XZpvibWW8096ID3YcFbY97DGEypqFPA7
	hsw323W+fy2xUn2eYdpuwaMFEbkgGTNgjbALpl12zukViIqlH8QN2CEljkgfk5vb
	62baOB/flFrKD+90YrkeXQQl/9c=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Subject: Re: [ANNOUNCEMENT] TEST: fetchmail 6.4.0.rc3-1
To: cygwin@cygwin.com
References: <announce.20190828144930.19906-1-corinna-cygwin@cygwin.com> <6b849bb1-c86e-0fe5-9ece-ad9d5ed180a6@ChinaBuckets.com> <fd184d4d-65d3-17e7-9279-b823138639b0@gmail.com> <7803ce5e-0a58-1b1f-4699-6d1d75f50f30@ChinaBuckets.com> <6d0543c0-3aff-1fa8-7cf5-399ac4aecea1@gmail.com>
From: Eliza <eli@ChinaBuckets.com>
Message-ID: <abebcd1b-7831-0d02-26cd-d2ad74bcf09f@ChinaBuckets.com>
Date: Thu, 29 Aug 2019 11:05:37 +0800
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <6d0543c0-3aff-1fa8-7cf5-399ac4aecea1@gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Hello,

on 2019/8/29 10:54, René Berber wrote:
> Check the sslcertpath parameter used by fetchmail, see if it points to
> the certificates (/etc/pki/tls/certs or /etc/ssl/certs).  Also sslkey if
> there is one.
> 
> The parameter(s) could/should be in ~/.fetchmailrc .

Yes the certs files are there:

$ ls /etc/pki/tls/certs
ca-bundle.crt  ca-bundle.trust.crt


$ ls /etc/ssl/certs
ca-bundle.crt  ca-bundle.trust.crt


fetchmail -v got the same error at the bottom lines.

  unable to get local issuer certificate
fetchmail: Broken certification chain at: /C=US/O=DigiCert 
Inc/OU=www.digicert.com/CN=GeoTrust RSA CA 2018
fetchmail: This could mean that the server did not provide the 
intermediate CA's certificate(s), which is nothing fetchmail could do 
anything about.  For details, please see the README.SSL-SERVER document 
that ships with fetchmail.
fetchmail: This could mean that the root CA's signing certificate is not 
in the trusted CA certificate location, or that c_rehash needs to be run 
on the certificate directory. For details, please see the documentation 
of --sslcertpath and --sslcertfile in the manual page.
fetchmail: OpenSSL reported: error:1416F086:SSL 
routines:tls_process_server_certificate:certificate verify failed


Thank you.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple