Re: smtpd_tls_chain_files and EC PARAMETERS

2019-11-08 Thread Viktor Dukhovni
On Fri, Nov 08, 2019 at 10:03:55PM +0100, Moviuro wrote: > Hi all, > > # ecc.key is: (note the EC PARAMETERS object) > -BEGIN EC PARAMETERS- > ... > -END EC PARAMETERS- > -BEGIN EC PRIVATE KEY- > ... > -END EC PRIVATE KEY- > According to the documentation, smtpd_t

smtpd_tls_chain_files and EC PARAMETERS

2019-11-08 Thread Moviuro
Hi all, As reported on 2019-11-08 on IRC, I have issues with ECC certificates in smtpd_tls_chain_files, which don't happen with the older smtpd_tls_eccert_file and smtpd_tls_eckey_file. I use acme.sh [0] to renew my certificates from let's encrypt: crontab extract: @weekly /usr/local/sbin/acme.sh

Re: Problems with header checks

2019-11-08 Thread Robert L Mathews
On 11/8/19 6:31 AM, Jaroslaw Rafa wrote: > If you do it on incoming mail only, and after DKIM signature has already > been verified, then I think there's no problem. Am I right? Not always, because some people use tools that verify the signature later on, such as this one: https://github.com/li

Re: Problems with header checks

2019-11-08 Thread Jaroslaw Rafa
Dnia 8.11.2019 o godz. 15:23:52 Stephan Seitz pisze: > > But the warning about breaking DKIM signatures if I change the > subject line is of course a valid one. If you do it on incoming mail only, and after DKIM signature has already been verified, then I think there's no problem. Am I right? B

Re: Problems with header checks

2019-11-08 Thread Stephan Seitz
On Fr, Nov 08, 2019 at 03:11:34 +0100, Jaroslaw Rafa wrote: If I understand the OP correctly, he is trying to solve the problem of e-mail clients using other prefixes instead of "Re:" for replies (for example "AW:" or "Odp:" - these are among a few I encountered myself). When you exchange emails

Re: Problems with header checks

2019-11-08 Thread Jaroslaw Rafa
Dnia 8.11.2019 o godz. 14:27:18 Christian Kivalo pisze: > > I don't think that postfix is the right tool for this job, on the other > hand I don't really see the problem you're trying to solve. If I understand the OP correctly, he is trying to solve the problem of e-mail clients using other pref

Re: Problems with header checks

2019-11-08 Thread Christian Kivalo
On November 8, 2019 1:53:13 PM GMT+01:00, Stephan Seitz wrote: >On Fr, Nov 08, 2019 at 01:44:53 +0100, Stephan Seitz wrote: >>Has anyone an idea how I can debug this further? Or why it is only >>sometimes working? > >I think I’ve found the problem. It happens if the subject has non-ASCII > >c

Re: Problems with header checks

2019-11-08 Thread Stephan Seitz
On Fr, Nov 08, 2019 at 01:44:53 +0100, Stephan Seitz wrote: Has anyone an idea how I can debug this further? Or why it is only sometimes working? I think I’ve found the problem. It happens if the subject has non-ASCII characters to the line looks like: =?UTF-8?Q?Aw=3A_Weinprobe_gut_=C3=BCber

Problems with header checks

2019-11-08 Thread Stephan Seitz
Hi! I’m using Debian 10 with postfix 3.4.5. Trying to solve the problem with non-Re subjects I have found a regex for header checks. So I have a „/etc/postfix/header_check.pcre” with: /eSubject:\s*((RE|AW|Aw|Antw|Antwort|RES|SV):\s*)+(.*)$/ REPLACE Subject: Re: $3 In main.cf: header_checks =