make gmail work with fetchmail, new 11/2007


Install the appropriate SSL Certificate

  sh# cd /usr/share/ssl/certs   #make need to create w/ mode 755
  sh# openssl s_client -connect smtp.gmail.com:995 -showcerts

  ... cut-n-paste the bits in between BEGIN and END CERTIFICATE,
      inclusive of those lines, into gmail-latest.pem

  sh# chmod 644 gmail-latest.pem
  sh# openssl x509 -fingerprint -md5 -noout -in gmail-latest.pem
    MD5 Fingerprint=44:A8:E9:2C:FB:A9:7E:6D:F9:DB:F3:62:B2:9E:F1:A9
  sh# c_rehash .                      # this did not work for me in fc4
  sh# /usr/sbin/cacertdir_rehash .    # seems better...

Tell fetchmail about gmail.com

  sh# vi .fetchmailrc      #and add the following stanza

  poll pop.gmail.com
       protocol pop3
       username "luser@gmail.com" password "s33kr3t" is "localuser" here
       options  ssl
           sslfingerprint '44:A8:E9:2C:FB:A9:7E:6D:F9:DB:F3:62:B2:9E:F1:A9'
           sslcertck sslcertpath /usr/share/ssl/certs


date: 11/12/2007