Changes between Version 13 and Version 14 of TransitionTrac

Timestamp:

06/26/14 14:50:58 (2 years ago)

Author:

chris

Comment:

fetchmail SSL fingerprint steps updated, see #Fetchmail

TransitionTrac

@@ -46 +46 @@
 == Fetchmail  ==
 
-Email was configured on ticket:494 and when the mails server SSL cert is changed it's fingerprint needs updating, see ticket:494#comment:21
+Email was configured on ticket:494 and when the mails server SSL cert is changed it's fingerprint needs updating, see ticket:494#comment:21 and ticket:750, these are the steps that need to be followed when the cert at mail.webarch.net is updated:
+
+Check for this issue:
+
+{{{
+su-trac    
+fetchmail 
+  fetchmail: mail.webarch.net fingerprints do not match!
+  140106143241896:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:1172:
+  fetchmail: SSL connection failed.
+  fetchmail: socket error while fetching from trac.tech.transitionnetwork.org@mail.webarch.net
+  fetchmail: Query status=2 (SOCKET)
+}}}
+
+Get the new fingerprint:
+
+{{{
+fetchmail -v -p imap -u trac.tech.transitionnetwork.org mail.webarch.net | grep -i "key fingerprint"
+fetchmail: mail.webarch.net key fingerprint: EE:E3:86:28:53:FB:E9:C4:97:68:C7:43:11:CA:CC:6C
+}}}
+
+Update {{{/web/tech.transitionnetwork.org/.fetchmailrc}}} with the new fingerprint and test:
+
+{{{
+fetchmail 
+22 messages for trac.tech.transitionnetwork.org at mail.webarch.net.
+reading message trac.tech.transitionnetwork.org@mail.webarch.net:1 of 22 (2047 header octets) (2041 body octets) flushed
+reading message trac.tech.transitionnetwork.org@mail.webarch.net:2 of 22 (1284 header octets) (10980 body octets) flushed
+reading message trac.tech.transitionnetwork.org@mail.webarch.net:3 of 22 (1284 header octets) (10332 body octets) flushed
+...
+
+}}}
+