Re: Postfix TLS crash on MacOS 10.13 (High Sierra)

2017-11-20 Thread Viktor Dukhovni
> On Nov 20, 2017, at 10:46 PM, AnotherGuyFromAlberta > wrote: > > I recently upgraded a Mac server to 10.13 (High Sierra). This server > has been running for about 5 years and hosts Postfix. After upgrading the > OS I upgraded: > 1. dovecot to 2.2.33.2 > 2. openssl to 1.1.0g > 3. pcre to

Postfix TLS crash on MacOS 10.13 (High Sierra)

2017-11-20 Thread AnotherGuyFromAlberta
Hi, I recently upgraded a Mac server to 10.13 (High Sierra). This server has been running for about 5 years and hosts Postfix. After upgrading the OS I upgraded: 1. dovecot to 2.2.33.2 2. openssl to 1.1.0g 3. pcre to 8.41 4. postfix to 3.2.4 Everything appears to compile and work except TLS

Re: Rewrite the To: header?

2017-11-20 Thread Jack Bates
On 19/11/17 05:04 PM, Viktor Dukhovni wrote: On Nov 19, 2017, at 11:36 AM, Jack Bates wrote: Is there a feature I can use to rewrite the To: header, of "virtual alias domain" mail, with the result of the following lookup, *after* smtpd_milters are applied? SELECT 'b...@example.com' FROM my_ta

Re: Rewrite the To: header?

2017-11-20 Thread Jack Bates
On 19/11/17 12:20 PM, Bill Cole wrote: On 19 Nov 2017, at 11:36 (-0500), Jack Bates wrote: Is there a feature I can use to rewrite the To: header, of "virtual alias domain" mail, with the result of the following lookup, *after* smtpd_milters are applied? SELECT 'b...@example.com' FROM my_tabl

Re: OCSP stapling

2017-11-20 Thread Viktor Dukhovni
> On Nov 16, 2017, at 12:41 PM, Nik Kostaras > wrote: > > Hi all, > > I'd like to ask your view about OCSP Stapling in postfix. > Do you think that it adds value for certificate revocation without > overcomplicating the code and slowing down the performance > (assuming that the stapling proc

OCSP stapling

2017-11-20 Thread Nik Kostaras
Hi all, I'd like to ask your view about OCSP Stapling in postfix. Do you think that it adds value for certificate revocation without overcomplicating the code and slowing down the performance (assuming that the stapling process and OCSP caching would be handled outside the scope of postfix) Is