[pkg-fetchmail-maint] Bug#568455: Bug#568455: fetchmail TLS/SSL with Exchange 2007 results in Autorization failures

[Patrick Rynhart]

Hi Nico,

Thanks for your mail. However, I'm not trying to match the version of 
fetchmail shipped with Lenny - just attempting to get a version of 
fetchmail with SSL support that works within our environment. (In 
particular, I'm not using Debian src, rather the tgz downloaded direct 
from the fetchmail site.)

What I have noticed is that if I "aptitude install fetchmail" then we 
end up with a version of fetchmail which is unable to retrieve messages 
via POP3 in our Exchange 2007 environment; this has been confirmed by 
other users of this shared server.  However, if I build fetchmail with 
SSL support from source (obtained direct from the fetchmail website) 
then mail can be retrieved.

Thanks & Regards,

Patrick

On 7/02/10 2:19 AM, Nico Golde wrote:
> Hey,
> * Patrick Rynhart<P.Rynhart at massey.ac.nz>  [2010-02-05 02:49]:
>    
>> Package: fetchmail
>> Version: Lenny
>> Severity: important
>>
>>
>> After upgrading from Debian Etch to Lenny using SSL/TLS to retreive email via POP from our Exchange 2007 environment is broken.
>> All attempts to retrieve mail (with credentials provided in users .fetchmailrc files) result in "Autorization failure"
>>
>> The certificates used to secure our Exchange environment are issued by DigiCert Inc (I'm not sure if this is related but thought that the
>> CA for this certificate could have been dropped between Etch and Lenny - however, if I build from source and compile against the
>> Debian Lenny provided SSL libraries then the problem is resolved).
>>
>> The issue was resolved by building fetchmail 6.3.13 from source with SSL support enabled.
>>      
> 6.3.13 is not in lenny?!
>
> downgrading and tagged with moreinfo, using 6.3.13 SSL works fine.
>
> Cheers
> Nico
>