[pkg-fetchmail-maint] Bug#568455: fetchmail TLS/SSL with Exchange 2007 results in Autorization failures

[Patrick Rynhart]

Package: fetchmail
Version: Lenny
Severity: important


After upgrading from Debian Etch to Lenny using SSL/TLS to retreive email via POP from our Exchange 2007 environment is broken.  
All attempts to retrieve mail (with credentials provided in users .fetchmailrc files) result in "Autorization failure"

The certificates used to secure our Exchange environment are issued by DigiCert Inc (I'm not sure if this is related but thought that the 
CA for this certificate could have been dropped between Etch and Lenny - however, if I build from source and compile against the 
Debian Lenny provided SSL libraries then the problem is resolved).

The issue was resolved by building fetchmail 6.3.13 from source with SSL support enabled.

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages fetchmail depends on:
ii  adduser         3.110                    add and remove users and groups
ii  debianutils     2.30                     Miscellaneous utilities specific t
ii  libc6           2.7-18lenny2             GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libkrb53        1.6.dfsg.4~beta1-5lenny2 MIT Kerberos runtime libraries
ii  libssl0.9.8     0.9.8g-15+lenny6         SSL shared libraries
ii  lsb-base        3.2-20                   Linux Standard Base 3.2 init scrip

Versions of packages fetchmail recommends:
ii  ca-certificates               20080809   Common CA certificates

Versions of packages fetchmail suggests:
pn  fetchmailconf                 <none>     (no description available)
pn  resolvconf                    <none>     (no description available)
ii  ssmtp [mail-transport-agent]  2.62-3     extremely simple MTA to get mail o