Enable --sslcertck by default.

There are no sslcertck (rcfile) and --nosslcertck (command line) options
that can be combined with [--]sslfingerprint if so desired.

The documentation is deliberately not updated everywhere, so that
recommendations to use --sslcertck stand, this is for the benefit of
users that read fetchmail v6.4.0 manuals to configure a fetchmail v6.3.X
implementation.

1 files changed, 2 insertions, 1 deletions

diff --git a/rcfile_y.y b/rcfile_y.y
index 91de6146..70615661 100644
--- a/rcfile_y.y
+++ b/rcfile_y.y
@@ -362,7 +362,8 @@ user_option	: TO mapping_list HERE
 		| NO MIMEDECODE		{current.mimedecode  = FLAG_FALSE;}
 		| NO IDLE		{current.idle        = FLAG_FALSE;}
 
-		| NO SSL 	        {current.use_ssl     = FLAG_FALSE;}
+		| NO SSL		{current.use_ssl     = FLAG_FALSE;}
+		| NO SSLCERTCK		{current.sslcertck   = FLAG_FALSE;}
 
 		| LIMIT NUMBER		{current.limit       = NUM_VALUE_IN($2);}
 		| WARNINGS NUMBER	{current.warnings    = NUM_VALUE_IN($2);}