[SOLVED] Fetchmail problem in PMG 6.1-5

[Andres.Urzagasti]

Hi!
I have sucessfully upgraded PMG from 5.1-4 to 6.1-5
The configuration is: Download mail from an external ISP that uses POP3 without SSL. Previous PMG was configured and works ok with this scenario, and Fetchmail.

In the migration, all of the fetchmail accounts was updated to "Use SSL", passing to 995 port, so I have to edit manually one by one, and unchecking box for activate 110-Port.
Actually cannot download none mail from the ISP server. In the syslog I cannot see anymore fetchmail reports.

Some ideas?
Thanks!

 

[Stoiko Ivanov]

In the migration, all of the fetchmail accounts was updated to "Use SSL",

This is nothing that happens by default during an upgrade.
did you check the upgrade instructions in the wiki:
https://pmg.proxmox.com/wiki/index.php/Upgrade_from_5.x_to_6.0


* could you post your 'fetchmailrc.tt' template (check for both files '/etc/pmg/templates/fetchmailrc.tt' and '/var/lib/pmg/templates/fetchmailrc.tt'
* what's the output of `systemctl status fetchmail` ?
* anything relevant in the output of `journalctl -b` and/or `journalctl -u fetchmail`

Thanks!

 

[Andres.Urzagasti]

Hello and thanks for your reply
Yes, the upgrade was donde with the instructions on wiki. I just start to install PMG 6.1 from zero, in other vm.

-----
cat: /etc/pmg/templates/fetchmailrc.tt: No such file or directory
root@proxmoxMG:~# cat /var/lib/pmg/templates/fetchmailrc.tt
# auto-generated using template fetchmailrc.tt

set daemon 300
set no bouncemail

defaults:
antispam -1
batchlimit 100

smtphost [% ipconfig.int_ip %]/[% pmg.mail.ext_port %]
# proxmox settings (Do not delete this marker!!)
[% FOREACH item IN fetchmail_users.list('values') %]
[% IF item.enable %]poll[% ELSE %]skip[% END -%]
[% item.id %] via "[% item.server %]"
protocol [% item.protocol %] port [% item.port %]
[% IF item.interval %] interval [% item.interval %]
[% END -%]
user "[% item.user %]" pass "[% item.pass %]"
to "[% item.target %]"
[% IF item.options %] [% item.options %]
[% END -%]
[% END %]
-----

Systemctl status fetchmail only. (lines can be truncated by column)
● fetchmail.service - LSB: init-Script for system wide fetchmail daemon
Loaded: loaded (/etc/init.d/fetchmail; generated; vendor preset: enabled)
Active: active (running) since Mon 2020-02-24 02:33:25 -03; 6h ago
Docs: man:systemd-sysv-generator(8)
Process: 850 ExecStart=/etc/init.d/fetchmail start (code=exited, status=0/SUCCESS)
Tasks: 1 (limit: 4915)
CGroup: /system.slice/fetchmail.service
└─872 /usr/bin/fetchmail -f /etc/fetchmailrc --pidfile /var/run/fetchmail/fetchmail.pid --syslog

Feb 24 09:27:32 proxmoxMG fetchmail[872]: Server certificate verification error: self signed certificate
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Missing trust anchor certificate: /C=AR/ST=Buenos Aires/L=Capital Federal/O=IPV4/OU=pop3/CN=pop.ipv4n
Feb 24 09:27:32 proxmoxMG fetchmail[872]: This could mean that the root CA's signing certificate is not in the trusted CA certificate location,
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Server certificate verification error: certificate has expired
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Warning: the connection is insecure, continuing anyways. (Better use --sslcertck!)
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Server certificate verification error: self signed certificate
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Missing trust anchor certificate: /C=AR/ST=Buenos Aires/L=Capital Federal/O=IPV4/OU=pop3/CN=pop.ipv4n
Feb 24 09:27:32 proxmoxMG fetchmail[872]: This could mean that the root CA's signing certificate is not in the trusted CA certificate location,
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Server certificate verification error: certificate has expired
Feb 24 09:27:32 proxmoxMG fetchmail[872]: Warning the connection is insecure, continuing anyways. (Better use --sslcertck!)

---

There is nothing relevant in journal output, only more fetchmail warnings.
Appears to be that the mail now is downloading. How I can set to "not use" SSL? The logs are bumped of server certificate errors.


Thanks!

 

[Stoiko Ivanov]

could you please post an anonymized source of your '/etc/fetchmailrc'
Thanks!

 

[Stoiko Ivanov]

How I can set to "not use" SSL?

that should happen if you don't select the ssl-flag in the GUI

 

[Andres.Urzagasti]

anonymized source of your '/etc/fetchmailrc'

poll proxmox0016 via "servidorpop.com"
protocol pop3 port 995
interval 1
user "*********" pass "******"
to "********"
dropdelivered ssl

In the fetchmailrc, accounts are showed in SSL.
I guess that the last word "ssl" is the origin of the problems.
I have downloaded the fetchmailrc by SFTP, mass-erased the SSL and changed port 995 to 110, and uploaded the fetchmailrc to server again.
Works now without errors. Will monitoring in the next day.

Thanks.