Victor Duchovni <[EMAIL PROTECTED]> writes: > On Tue, Jul 29, 2008 at 08:21:09PM +0200, Matthias Andree wrote: > >> > > smtp_sasl_tls_verified_security_options apparently stopped working after >> > > the upgrade. >> > >> > There has never been an official release where this feature is fully >> > implemented. The code for 2.6 is ready, but it is in the review queue >> > behind multi-instance support. >> >> Well - then the smtp(8) manpage and "postfix -n" could need fixing for >> the next 2.5.X and 2.4.Y releases to remove this confusion, as the >> former (as of 2.5.1, I didn't check 2.4.X) states: > >> | Available in Postfix version 2.4 and later: >> | >> | smtp_sasl_tls_verified_security_options ($smtp_sasl_tls_security_options) >> | >> | The SASL authentication security options that the Postfix SMTP >> | client uses for TLS encrypted SMTP sessions with a verified server >> | certificate. > > The docs I see say: > > The SASL authentication security options that the Postfix SMTP > client uses for TLS encrypted SMTP sessions with a verified server > certificate. This feature is under construction as of Postfix > version 2.3. > > You have left out the crucial final sentence. If the TLS patch-set > for 2.6 is reviewed in time, this should be fully available in 2.6.
No Victor, I haven't left that out, I simply don't have it in the smtp(8) manual page: $ cat /etc/SuSE-release openSUSE 11.0 (i586) VERSION = 11.0 $ rpm -qf $(man -w 8 smtp) postfix-2.5.1-28.1 $ postconf mail_version mail_version = 2.5.1 $ postconf mail_release_date mail_release_date = 20080216 and Novell isn't patching documentation in said RPM - I downloaded the .src.rpm and checked - the contained 2.5.1 tarball verifies with Wietse's official .sig GnuPG checksum, and smtp.c, .8 and .8.html also match what I quoted (left in). Conclusion: documentation doesn't match implementation. Reason unknown. I suggest to fix the former in the current situation. Best regards, -- Matthias Andree