fetchmail ssl certificate verification problem in FreeBSD 8.1

[Dan Strick]

On Sun, 15 Aug 2010 22:36, Erik Norgaard wrote:

> A little bit of searching around I found this (I don't know since when):
>
> # less /usr/src/crypto/openssl/certs/README.RootCerts
> The OpenSSL project does not (any longer) include root CA certificates.
>
> Please check out the FAQ:
>    * How can I set up a bundle of commercial root CA certificates?
>
> The FAQ is here:
>
> /usr/src/crypto/openssl/FAQ

That explains the problem.
I copied the file /usr/local/share/certs/ca-root-nss.crt from my old
FreeBSD release-8.0 system and hooked it up to fetchmail with the
fetchmail sslcertfile option.  At least fetchmail is now happy.

Thanks for the help,
Dan Strick