Subject: certificate error in Pine 4.44

From: Andrew Daviel <[email-masked]>
Date: Thu, 17 Jan 2002 18:03:51 -0800 (PST)

We recently upgraded to Pine 4.44 from RedHat (packaged by RedHat, I 
should say :-)  ) and started getting an error message connecting to our 
server:

There was a failure validating the SSL/TLS certificate for the server
unable to get local issuer certificate
(Our IMAP server works with SSL in Netscape)

I have read the FAQs for Pine and OpenSSL, from which it seems I need
to install the root CA for our cert (Thawte, in this case) on each
client machine. Butr I'm not sure how to do this.

Pine on my RedHat 6.2 box is doing
open("/usr/share/ssl/cert.pem", O_RDONLY) = -1 ENOENT 
stat("/usr/share/ssl/certs/ddc328ff.0", 0xbfffb2c8) = -1 ENOENT 

I have openssl-0.9.5a.
On another machine with openssl-0.9.6-9 I found a ca-bundle.crt
and the Pine FAQ suggests I need to extract the root certs from this.

 ..... tap,tap,tap ....

OK, 2 solutions - 
Either, get ca-bundle.crt from somewhere (like a recent distro of
OpenSSL) and symlink it to /usr/share/ssl/cert.pem
or get all the root certs from e.g. openssl-0.9.5a/certs/thawteCb.pem 
etc., copy them to /usr/share/ssl/certs then run 
"c_rehash usr/share/ssl/certs" to make the hashes

-- 
Andrew Daviel, TRIUMF, Canada
Tel. +1 (604) 222-7376
[email-masked]

-- 
-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------