[pfx] Re: All over sudden cannot verify Microsoft TLS certificates?

2024-12-08 Thread Danjel Jungersen via Postfix-users
the system is a Debian 12 with latest updates. Did Microsoft mess it or do we mess it? Anyone else experiencing such issues with MS atm? I have nothing like that in my logs, but I'm pretty low volume //Danjel ___ Postfix-users mailing list -- po

[pfx] All over sudden cannot verify Microsoft TLS certificates?

2024-12-08 Thread Tobi via Postfix-users
Hello list since this weekend we have the issue that our postfix seems to be unable to verify TLS certs presented by Microsoft. We get > Server certificate not verified all over the postfix logs. Manually testing shows the same > openssl verify -verbose <(echo | openssl s_client -connect 52.101

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Wietse Venema via Postfix-users
Michael Tokarev via Postfix-users: > Just to demonstrate what's in debian about the matter, which I basically > just removed a few days ago: > > https://salsa.debian.org/postfix-team/postfix-dev/-/commit/60a176aeee7dc0397037bc7980d5f3f265b624fa > - "Access blocked: Debian Salsa can only be used

[pfx] Re: Postfix pipelines

2024-12-08 Thread Kenneth Porter via Postfix-users
--On Sunday, December 08, 2024 9:36 AM + Sad Clouds via Postfix-users wrote: It really helps if I can visualize the overall architecture on a single diagram. This reminds me of the old iptables plumbing diagram that really helped me understand how the Linux firewall worked. This should

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:59, Viktor Dukhovni via Postfix-users wrote: https://bugs.debian.org/882141 -- this is what we have in debian, and the current solution: ln -s "$SERVICEFILE" "$WANTDIR/postfix@-.service" for DIR in $(postconf -h multi_instance_directories); do ln -s "$SERVICEFILE" "$WANTDIR/p

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 08, 2024 at 07:39:18PM +0300, Michael Tokarev via Postfix-users wrote: > > - default_database_type > > - alias_database > > - ... > > How this can depend on the system environment? Maybe only if it is > something like (sorry I don't remember the correct syntax) -- >

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 08, 2024 at 07:09:26PM +0300, Michael Tokarev via Postfix-users wrote: > This is exactly why debian install scripts for postfix jumps through > numerous hoops just to init the initial /etc/aliases.db. This > complexity and unreliability is astonishing, I just see it as self-inflicte

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:10, Viktor Dukhovni via Postfix-users wrote: DO NOT attempt to build database tables, except just-in-time, shortly before Postfix is ready to be started. Otherwise, you cannot know the desired value of various supporting parameters, that may depend on the system environment:

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:10, Viktor Dukhovni via Postfix-users пишет: On Sun, Dec 08, 2024 at 05:43:38PM +0300, Michael Tokarev via Postfix-users wrote: But a package might be installed from another system for example (bootstrapping) where host name is not required to be set, or during regular system set

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 08, 2024 at 05:43:38PM +0300, Michael Tokarev via Postfix-users wrote: > But a package might be installed from another system for example > (bootstrapping) where host name is not required to be set, or during > regular system setup when host name part hasn't been done yet, or in > num

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 18:12, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: One example is `newaliases' run at the end of the startup procedure in debian, - it has numerous rather complex workarounds, and yet there are open bug reports still, for many years. The simple thing

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Wietse Venema via Postfix-users
Michael Tokarev via Postfix-users: > Hi! > > I'm revisiting debian packaging of postfix, and noticed that a lot of stuff > is done > in quite sophisticated, twisty, or outright wrong way due to a simple issue: > many > postfix utilities require certain parameters to be set. > > One example is `

[pfx] some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
Hi! I'm revisiting debian packaging of postfix, and noticed that a lot of stuff is done in quite sophisticated, twisty, or outright wrong way due to a simple issue: many postfix utilities require certain parameters to be set. One example is `newaliases' run at the end of the startup procedure

[pfx] Re: Postfix pipelines

2024-12-08 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 08, 2024 at 09:36:05AM +, Sad Clouds wrote: > On Sat, 7 Dec 2024 23:50:14 +1100 > Viktor Dukhovni via Postfix-users wrote: > > > No role. Where are you going with this "all the internal details > > please" perspective? > > Hello, in the near future, I will be managing my own Po

[pfx] Re: Postfix pipelines

2024-12-08 Thread Sad Clouds via Postfix-users
On Sat, 7 Dec 2024 23:50:14 +1100 Viktor Dukhovni via Postfix-users wrote: > No role. Where are you going with this "all the internal details > please" perspective? Hello, in the near future, I will be managing my own Postfix SMTP and Dovecot IMAP servers. It really helps if I can visualize the