Le 21/05/2018 à 14:33, Jacques a écrit :

Bonjour,

souvent mais pas toujours (pas de stats) :

fetchmail: Server certificate verification error: unable to get local issuer certificate

fetchmail: Broken certification chain at: /C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA

fetchmail: This could mean that the server did not provide the intermediate CA's certificate(s), which is nothing fetchmail could do anything about.  For details, please see the README.SSL-SERVER document that ships with fetchmail.

fetchmail: This could mean that the root CA's signing certificate is not in the trusted CA certificate location, or that c_rehash needs to be run on the certificate directory. For details, please see the documentation of --sslcertpath and --sslcertfile in the manual page.

fetchmail: OpenSSL reported: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

fetchmail: SSL connection failed.

fetchmail: socket error while fetching from jacques.lavignotte@pop.orange.fr

fetchmail: Query status=2 (SOCKET)

L'Agrume...

Je confirme c'est le serveur 80.12.24.209 qui a un souci de certificats (les autres serveurs sont OK):

jacques:~$ openssl s_client -connect 80.12.24.209:995 CONNECTED(00000003) depth=0 C = FR, L = Paris, O = Orange, OU = Orange France, CN = pop.orange.fr verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = FR, L = Paris, O = Orange, OU = Orange France, CN = pop.orange.fr verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/C=FR/L=Paris/O=Orange/OU=Orange France/CN=pop.orange.fr i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA