Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #209876 > unrolled thread

Re: Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch)

Back to article view | Back to linux.debian.user

Contents

  Re: Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch) Joe Aquilina <joe@chem.com.au> - 2019-06-14 07:20 +0200
    Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch) Gene Heskett <gheskett@shentel.net> - 2019-06-14 11:20 +0200
      Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch) Joe Aquilina <joe@chem.com.au> - 2019-06-17 03:50 +0200
        Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch) Gene Heskett <gheskett@shentel.net> - 2019-06-17 04:20 +0200

#209876 — Re: Re: Fetchmail not working after upgrade to Debian 9.9 (Stretch)

[Multipart message — attachments visible in raw view] — view raw

> >> On Thursday 13 June 2019 09:58:39 pm Joe Aquilina wrote:
>
> >> Hello all.
> >> A colleague has very recently upgraded his Debian system at home from
> >> Jessie (not sure which version) to Stretch (9.9) and from that moment,
> >> fetchmail has failed to collect emails. I/we are relatively
> >> inexperienced with diagnosing & fixing such problems and are looking
> >> for any advice people here may be able to give us to overcome this
> >> problem. When fetchmail polls the email server, we get the following
> >> error message:
>
> >> Jun 14 09:21:02 localhost fetchmail[15672]: Your OpenSSL version does
> >> not support SSLv3.Jun 14 09:21:02 localhost fetchmail[15672]: SSL
> >> connection failed.Jun 14 09:21:02 localhost fetchmail[15672]: socket
> >> error while fetching from cccmail@mail.chem.com.auJun 14 09:21:02
>
> > its rather plainly telling you your ssl version is too old. Perhaps it 
> > did not get upgraded with the rest of the system?  Make sure the 
> > security channel for your repo is enabled.
Checked in dpkg, which tells me that fetchmail and openssl are both 
upgraded to the current versions.

Is this the relevant section of the sources.list:

deb http://ftp.iinet.net.au/debian/debian/ stretch main

deb http://security.debian.org/ stretch/updates main contrib non-free

This leads me to think that the security channel is enabled, but I have 
been known to be wrong about these things.

Anything else I need to be looking for?

> >> localhost fetchmail[15672]: Query status=2 (SOCKET)
> >> Below is a copy of the .fetchmailrc file on that system (with any
> >> sensitive data replaced:
> >> set no bouncemail
> >> set postmaster "postmaster_details"
> >>
> >> poll email.server.name 
> >>         protocol pop3 port 995
> >>         with uidl
> >>         user "username" with password "secret" is
> >> "local_account" here
> >>         with ssl and sslproto 'TLS1+'
> >>         with sslfingerprint
> >> "AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA"
> >>         with keep
> >>         smtpaddress "local_smtp_server"
> >>         mda "/usr/bin/procmail -d %T"
> >>
> >> We have a near identical machine here at work, that has been running
> >> Debian 9 for some time, and it is collecting emails from the relevant
> >> email server just fine.
> >> Any thoughts/suggestions welcome. Is there anything else that I can
> >> post here that might give those more knowledgeable than us a clue as
> >> to what we need to do to fix this?
> >> Thanks in advance.
> >> Cheers.
> >> Joe Aquilina
>
> > -- 
> > "There are four boxes to be used in defense of liberty:
> > soap, ballot, jury, and ammo. Please use in that order."
> > -Ed Howdershelt (Author)
> > If we desire respect for the law, we must first make the law respectable.
> > - Louis D. Brandeis
> > Genes Web page <http://geneslinuxbox.net:6309/gene>
-- 

Joe Aquilina
Central Chemical Consulting Pty Ltd
PO Box 2546 Malaga WA 6944 Australia
1/11 Narloo St Malaga 6090 Australia
Tel: +61  8 9248 2739  Fax: +61  8 9248 2749
joe@chem.com.au  www.chem.com.au

[toc] | [next] | [standalone]

#209884

On Friday 14 June 2019 01:06:16 am Joe Aquilina wrote:

> > >> On Thursday 13 June 2019 09:58:39 pm Joe Aquilina wrote:
> > >>
> > >> Hello all.
> > >> A colleague has very recently upgraded his Debian system at home
> > >> from Jessie (not sure which version) to Stretch (9.9) and from
> > >> that moment, fetchmail has failed to collect emails. I/we are
> > >> relatively inexperienced with diagnosing & fixing such problems
> > >> and are looking for any advice people here may be able to give us
> > >> to overcome this problem. When fetchmail polls the email server,
> > >> we get the following error message:
> > >>
> > >> Jun 14 09:21:02 localhost fetchmail[15672]: Your OpenSSL version
> > >> does not support SSLv3.Jun 14 09:21:02 localhost
> > >> fetchmail[15672]: SSL connection failed.Jun 14 09:21:02 localhost
> > >> fetchmail[15672]: socket error while fetching from
> > >> cccmail@mail.chem.com.auJun 14 09:21:02
> > >
> > > its rather plainly telling you your ssl version is too old.
> > > Perhaps it did not get upgraded with the rest of the system?  Make
> > > sure the security channel for your repo is enabled.
>
> Checked in dpkg, which tells me that fetchmail and openssl are both
> upgraded to the current versions.
>
> Is this the relevant section of the sources.list:
>
> deb http://ftp.iinet.net.au/debian/debian/ stretch main
>
> deb http://security.debian.org/ stretch/updates main contrib non-free
>
> This leads me to think that the security channel is enabled, but I
> have been known to be wrong about these things.
>
> Anything else I need to be looking for?
>
I think I would verify that both are using the same version.  You might 
even compare the installed .conf files.  Got to be a diff someplace.  

My own isp's mailserver is using dovecot, and doesn't use sslv3 just 
plain ssl. And because they also serve imap users from the same 
accounts, fetchmails DELE is ignored, so I log in daily with a browser 
and clean house.  Does your email agent have a "check what the server 
supports" function?

I've been known to use that, then transfer those results to fetcmail's 
recipe. 

> > >> localhost fetchmail[15672]: Query status=2 (SOCKET)
> > >> Below is a copy of the .fetchmailrc file on that system (with any
> > >> sensitive data replaced:
> > >> set no bouncemail
> > >> set postmaster "postmaster_details"
> > >>
> > >> poll email.server.name
> > >>         protocol pop3 port 995
> > >>         with uidl
> > >>         user "username" with password "secret" is
> > >> "local_account" here
> > >>         with ssl and sslproto 'TLS1+'
> > >>         with sslfingerprint
> > >> "AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA"
> > >>         with keep
> > >>         smtpaddress "local_smtp_server"
> > >>         mda "/usr/bin/procmail -d %T"
> > >>
> > >> We have a near identical machine here at work, that has been
> > >> running Debian 9 for some time, and it is collecting emails from
> > >> the relevant email server just fine.
> > >> Any thoughts/suggestions welcome. Is there anything else that I
> > >> can post here that might give those more knowledgeable than us a
> > >> clue as to what we need to do to fix this?
> > >> Thanks in advance.
> > >> Cheers.
> > >> Joe Aquilina
> > >
> > > --
> > > "There are four boxes to be used in defense of liberty:
> > > soap, ballot, jury, and ammo. Please use in that order."
> > > -Ed Howdershelt (Author)
> > > If we desire respect for the law, we must first make the law
> > > respectable. - Louis D. Brandeis
> > > Genes Web page <http://geneslinuxbox.net:6309/gene>


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>

[toc] | [prev] | [next] | [standalone]

#209970

On 14/6/19 5:09 pm, Gene Heskett wrote:
> On Friday 14 June 2019 01:06:16 am Joe Aquilina wrote:
>
>>>>> On Thursday 13 June 2019 09:58:39 pm Joe Aquilina wrote:
>>>>>
>>>>> Hello all.
>>>>> A colleague has very recently upgraded his Debian system at home
>>>>> from Jessie (not sure which version) to Stretch (9.9) and from
>>>>> that moment, fetchmail has failed to collect emails. I/we are
>>>>> relatively inexperienced with diagnosing & fixing such problems
>>>>> and are looking for any advice people here may be able to give us
>>>>> to overcome this problem. When fetchmail polls the email server,
>>>>> we get the following error message:
>>>>>
>>>>> Jun 14 09:21:02 localhost fetchmail[15672]: Your OpenSSL version
>>>>> does not support SSLv3.Jun 14 09:21:02 localhost
>>>>> fetchmail[15672]: SSL connection failed.Jun 14 09:21:02 localhost
>>>>> fetchmail[15672]: socket error while fetching from
>>>>> cccmail@mail.chem.com.auJun 14 09:21:02
>>>> its rather plainly telling you your ssl version is too old.
>>>> Perhaps it did not get upgraded with the rest of the system?  Make
>>>> sure the security channel for your repo is enabled.
>> Checked in dpkg, which tells me that fetchmail and openssl are both
>> upgraded to the current versions.
>>
>> Is this the relevant section of the sources.list:
>>
>> deb http://ftp.iinet.net.au/debian/debian/ stretch main
>>
>> deb http://security.debian.org/ stretch/updates main contrib non-free
>>
>> This leads me to think that the security channel is enabled, but I
>> have been known to be wrong about these things.
>>
>> Anything else I need to be looking for?
>>
> I think I would verify that both are using the same version.  You might
> even compare the installed .conf files.  Got to be a diff someplace.
>
> My own isp's mailserver is using dovecot, and doesn't use sslv3 just
> plain ssl. And because they also serve imap users from the same
> accounts, fetchmails DELE is ignored, so I log in daily with a browser
> and clean house.  Does your email agent have a "check what the server
> supports" function?
>
> I've been known to use that, then transfer those results to fetcmail's
> recipe.

Versions of both programs are the same on both machines. The only 
difference I can see is that, the machine on which fetchmail is working 
is an i386 system, while the non-working machine is an amd64 system. So 
the relevant versions of the programs reflect that.

>>>>> localhost fetchmail[15672]: Query status=2 (SOCKET)
>>>>> Below is a copy of the .fetchmailrc file on that system (with any
>>>>> sensitive data replaced:
>>>>> set no bouncemail
>>>>> set postmaster "postmaster_details"
>>>>>
>>>>> poll email.server.name
>>>>>          protocol pop3 port 995
>>>>>          with uidl
>>>>>          user "username" with password "secret" is
>>>>> "local_account" here
>>>>>          with ssl and sslproto 'TLS1+'
>>>>>          with sslfingerprint
>>>>> "AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA"
>>>>>          with keep
>>>>>          smtpaddress "local_smtp_server"
>>>>>          mda "/usr/bin/procmail -d %T"
>>>>>
>>>>> We have a near identical machine here at work, that has been
>>>>> running Debian 9 for some time, and it is collecting emails from
>>>>> the relevant email server just fine.
>>>>> Any thoughts/suggestions welcome. Is there anything else that I
>>>>> can post here that might give those more knowledgeable than us a
>>>>> clue as to what we need to do to fix this?
>>>>> Thanks in advance.
>>>>> Cheers.
>>>>> Joe Aquilina
>>>> --
>>>> "There are four boxes to be used in defense of liberty:
>>>> soap, ballot, jury, and ammo. Please use in that order."
>>>> -Ed Howdershelt (Author)
>>>> If we desire respect for the law, we must first make the law
>>>> respectable. - Louis D. Brandeis
>>>> Genes Web page <http://geneslinuxbox.net:6309/gene>
>
> Cheers, Gene Heskett


-- 
Joe Aquilina
Central Chemical Consulting Pty Ltd
PO Box 2546 Malaga WA 6944 Australia
1/11 Narloo St Malaga 6090 Australia
Tel: +61  8 9248 2739  Fax: +61  8 9248 2749
joe@chem.com.au  www.chem.com.au

[toc] | [prev] | [next] | [standalone]

#209972

On Sunday 16 June 2019 09:44:02 pm Joe Aquilina wrote:

> On 14/6/19 5:09 pm, Gene Heskett wrote:
> > On Friday 14 June 2019 01:06:16 am Joe Aquilina wrote:
> >>>>> On Thursday 13 June 2019 09:58:39 pm Joe Aquilina wrote:
> >>>>>
> >>>>> Hello all.
> >>>>> A colleague has very recently upgraded his Debian system at home
> >>>>> from Jessie (not sure which version) to Stretch (9.9) and from
> >>>>> that moment, fetchmail has failed to collect emails. I/we are
> >>>>> relatively inexperienced with diagnosing & fixing such problems
> >>>>> and are looking for any advice people here may be able to give
> >>>>> us to overcome this problem. When fetchmail polls the email
> >>>>> server, we get the following error message:
> >>>>>
> >>>>> Jun 14 09:21:02 localhost fetchmail[15672]: Your OpenSSL version
> >>>>> does not support SSLv3.Jun 14 09:21:02 localhost
> >>>>> fetchmail[15672]: SSL connection failed.Jun 14 09:21:02
> >>>>> localhost fetchmail[15672]: socket error while fetching from
> >>>>> cccmail@mail.chem.com.auJun 14 09:21:02
> >>>>
> >>>> its rather plainly telling you your ssl version is too old.
> >>>> Perhaps it did not get upgraded with the rest of the system? 
> >>>> Make sure the security channel for your repo is enabled.
> >>
> >> Checked in dpkg, which tells me that fetchmail and openssl are both
> >> upgraded to the current versions.
> >>
> >> Is this the relevant section of the sources.list:
> >>
> >> deb http://ftp.iinet.net.au/debian/debian/ stretch main
> >>
> >> deb http://security.debian.org/ stretch/updates main contrib
> >> non-free
> >>
> >> This leads me to think that the security channel is enabled, but I
> >> have been known to be wrong about these things.
> >>
> >> Anything else I need to be looking for?
> >
> > I think I would verify that both are using the same version.  You
> > might even compare the installed .conf files.  Got to be a diff
> > someplace.
> >
> > My own isp's mailserver is using dovecot, and doesn't use sslv3 just
> > plain ssl. And because they also serve imap users from the same
> > accounts, fetchmails DELE is ignored, so I log in daily with a
> > browser and clean house.  Does your email agent have a "check what
> > the server supports" function?
> >
> > I've been known to use that, then transfer those results to
> > fetcmail's recipe.
>
> Versions of both programs are the same on both machines. The only
> difference I can see is that, the machine on which fetchmail is
> working is an i386 system, while the non-working machine is an amd64
> system. So the relevant versions of the programs reflect that.
>
Fetchmail isn't that hard to build, I've done it a couple times.  You 
might want to dl the src deb and do a buildpackage on it just to make 
sure its built on the machine that will run it.

> >>>>> localhost fetchmail[15672]: Query status=2 (SOCKET)
> >>>>> Below is a copy of the .fetchmailrc file on that system (with
> >>>>> any sensitive data replaced:
> >>>>> set no bouncemail
> >>>>> set postmaster "postmaster_details"
> >>>>>
> >>>>> poll email.server.name
> >>>>>          protocol pop3 port 995
> >>>>>          with uidl
> >>>>>          user "username" with password "secret" is
> >>>>> "local_account" here
> >>>>>          with ssl and sslproto 'TLS1+'
> >>>>>          with sslfingerprint
> >>>>> "AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA:AA"
> >>>>>          with keep
> >>>>>          smtpaddress "local_smtp_server"
> >>>>>          mda "/usr/bin/procmail -d %T"
> >>>>>
> >>>>> We have a near identical machine here at work, that has been
> >>>>> running Debian 9 for some time, and it is collecting emails from
> >>>>> the relevant email server just fine.
> >>>>> Any thoughts/suggestions welcome. Is there anything else that I
> >>>>> can post here that might give those more knowledgeable than us a
> >>>>> clue as to what we need to do to fix this?
> >>>>> Thanks in advance.
> >>>>> Cheers.
> >>>>> Joe Aquilina
> >>>>
> >>>> --
> >>>> "There are four boxes to be used in defense of liberty:
> >>>> soap, ballot, jury, and ammo. Please use in that order."
> >>>> -Ed Howdershelt (Author)
> >>>> If we desire respect for the law, we must first make the law
> >>>> respectable. - Louis D. Brandeis
> >>>> Genes Web page <http://geneslinuxbox.net:6309/gene>
> >
> > Cheers, Gene Heskett


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web