Discussion:
Problem with GMail changing sslfingerprint (Fetchmail + Mutt)
(too old to reply)
Héctor Abreu
2021-01-17 17:19:34 UTC
Permalink
Hi,

I work via ssh using Mutt + Fetchmail and GMail POP3 service. I
frequently stop receiving emails because the sslfingerprint is
changed, and when I enter the new value in .fetchmailrc and go to
GMail settings to re-enable POP3, GMail settings offers me the option
of downloading all the messages again or only messages starting from
that very moment; I choose the latter, so I lose in my email client
all the messages from the moment the sslfingerprint was changed until
the moment I adjust its value to the new one and re-enable GMail POP3
settings. This is very annoying.

My .fetchmailrc looks like this:

set daemon 600

poll "pop.gmail.com" with proto POP3
port 995 user "***@gmail.com"
password "my_password"
sslfingerprint "6A:11:7A:51:A1:B1:D1:EF:ED:52:C3:0C:15:8F:A8:54"
no rewrite keep ssl nofetchall
mda "/usr/bin/maildrop"

I'm looking for a solution even if it is to stop using GMail, which
I'm planning anyway. I'd like to hear about alternative services who
are Fetchmail and Mutt friendly. I'm planning to use gpg for privacy,
too.

Thank you in advance for any hint or help.

Regards,
--
Héctor Abreu
Tavis Ormandy
2021-01-17 18:40:24 UTC
Permalink
Post by Héctor Abreu
sslfingerprint "6A:11:7A:51:A1:B1:D1:EF:ED:52:C3:0C:15:8F:A8:54"
Why not use sslcertck instead of hardcoding the fingerprint?

Tavis.
--
_o) $ lynx lock.cmpxchg8b.com
/\\ _o) _o) $ finger ***@sdf.org
_\_V _( ) _( ) @taviso
Loading...