X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-3.9 required=5.0	tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,KHOP_RCVD_TRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE
X-Spam-Check-By: sourceware.org
Message-ID: <4F9865AE.9060004@gmail.com>
Date: Wed, 25 Apr 2012 23:59:26 +0300
From: Vladimir Shatilo <vladimir DOT shatilo AT gmail DOT com>
Reply-To: vladimir DOT shatilo AT gmail DOT com
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20120327 Thunderbird/11.0.1
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: fetchmail and openssl
References: <4F986152 DOT 5000700 AT gmail DOT com>
In-Reply-To: <4F986152.5000700@gmail.com>
X-Forwarded-Message-Id: <4F986152 DOT 5000700 AT gmail DOT com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

In the latest cygwin package fetchmail 6.3.18-1 has been compiled with old openssl 0.9.8 library.
This causes errors in ssl certificate validation when connecting to imap or pop3 with ssl.
The problem is openssl 1.0.0 and later has different hash generation algorithm then previous 0.9.8 version.
So after c_rehash symbolic links to valid certificates have different names then fetchmail is looking for.

First I have verified it with strace and have got symbolic link names of certificates that fetchmail is looking for.
I created symbolic links with valid names (according to openssl 0.9.8 hashes) to existing certificates and fetchmail has worked well.

Finally I have compiled fetchmail 6.3.21 from source with openssl 1.0.1a-1 library and have got everything working as required.

So this is required to update fetchmail to 6.3.21 and compile it with latest openssl 1.0.1a-1 library in the main cygwin package.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple