lib/39636: fetchmail isn't doing IMAPS properly

[smb%cs.columbia.edu@localhost]

>Number:         39636
>Category:       lib
>Synopsis:       fetchmail isn't doing IMAPS
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Sep 27 16:50:00 +0000 2008
>Originator:     Steven M. Bellovin
>Release:        NetBSD 4.99.72
>Organization:
Department of Computer Science, Columbia University
>Environment:
        
        
System: NetBSD yellowstone.machshav.com 4.99.72 NetBSD 4.99.72 (YELLOWSTONE) 
#2: Thu Sep 25 21:47:44 EDT 2008 
root%yellowstone.machshav.com@localhost:/usr/BUILD/obj/sys/arch/amd64/compile/YELLOWSTONE
 amd64
Architecture: x86_64
Machine: amd64
>Description:
        When I build fetchmail on amd64-current, it can't connect over
        SSL to the IMAPS server I use:
        fetchmail: starting fetchmail 6.3.8 daemon
        140187686483524:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert 
handshake failure:/usr/src/crypto/dist/openssl/ssl/s3_pkt.c:1116:SSL alert 
number 40
        fetchmail: SSL connection failed.
        fetchmail: socket error while fetching from 
smb2132%mail.columbia.edu@localhost
        fetchmail: Query status=2 (SOCKET)
        fetchmail: sleeping at Fri Sep 26 19:52:55 2008 for 180 seconds
        
        A binary of the same version of fetchmail (6.3.8nb3) built on
        4.99.59 does work.  ldd shows that the old binary is using
        libssl.so.4; the new, failing, one is using libssl.so.6.
        Since I can connect to the IMAPS server using 'openssl s_client,
        I would suspect a fetchmail problem -- but
        http://bugs.gentoo.org/show_bug.cgi?id=198914 makes it sound
        like an openssl issue.
>How-To-Repeat:
        See above
>Fix:
        None known, unless you happen to have an old version of openssl
        lying around.

>Unformatted: