[pfx] Re: PATCH: 8bit GECOS in From not encoded?

2024-12-22 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 22, 2024 at 08:07:22PM -0500, Wietse Venema via Postfix-users wrote: > The "full name" encoding for Postfix-generated From: headers is > implemented. Code will be released after it has matured. > > Documentation: > https://www.postfix.org/postconf.5.html#full_name_encoding_charset Coo

[pfx] Re: PATCH: 8bit GECOS in From not encoded?

2024-12-22 Thread Wietse Venema via Postfix-users
The "full name" encoding for Postfix-generated From: headers is implemented. Code will be released after it has matured. Documentation: https://www.postfix.org/postconf.5.html#full_name_encoding_charset Wietse ___ Postfix-users mailing list -- p

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Viktor Dukhovni via Postfix-users
On Mon, Dec 23, 2024 at 10:50:49AM +1100, Viktor Dukhovni via Postfix-users wrote: > On Sun, Dec 22, 2024 at 02:31:56PM +, Laura Smith via Postfix-users wrote: > > > > Note that after the above you're allowing TLS 1.0 by default, where you > > > insisted on TLS 1.2 or higher before. Postfix p

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 22, 2024 at 02:31:56PM +, Laura Smith via Postfix-users wrote: > > Note that after the above you're allowing TLS 1.0 by default, where you > > insisted on TLS 1.2 or higher before. Postfix parsing of the legacy > > protocol negations has not changed. But you should be using the > >

[pfx] XOAUTH2 client (was: SASL options)

2024-12-22 Thread Wietse Venema via Postfix-users
Alexander Leidinger via Postfix-users: > Am 2024-12-22 01:39, schrieb Peter via Postfix-users: > > On 22/12/24 02:54, Michael Tokarev via Postfix-users wrote: > >> > >> However, there are other mechanisms being developed, for example > >> OAUTH2, > >> which, in terms of Cyrus SASL, does not work

[pfx] Re: SASL options

2024-12-22 Thread Alexander Leidinger via Postfix-users
Am 2024-12-22 01:39, schrieb Peter via Postfix-users: On 22/12/24 02:54, Michael Tokarev via Postfix-users wrote: However, there are other mechanisms being developed, for example OAUTH2, which, in terms of Cyrus SASL, does not work with saslauthd at all, I don't see why it wouldn't. so ne

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Laura Smith via Postfix-users
> Note that after the above you're allowing TLS 1.0 by default, where you > insisted on TLS 1.2 or higher before. Postfix parsing of the legacy > protocol negations has not changed. But you should be using the > preferred min/max forms. I know you're saying nothing changed, but I'm telling yo

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Viktor Dukhovni via Postfix-users
On Sun, Dec 22, 2024 at 02:04:46PM +, Laura Smith via Postfix-users wrote: > > > > > Perhaps Postfix does not "listen" on the IPv6 address? You can use nc or > > lsof > > to find out. > > > > See above where I said "worked fine before the update". "Worked fine" > includes external valid

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Laura Smith via Postfix-users
> Perhaps Postfix does not "listen" on the IPv6 address? You can use nc or lsof > to find out. > See above where I said "worked fine before the update". "Worked fine" includes external validation, i.e. direct email delivery and ipv6 test websites such as internet.nl For the records, I *th

[pfx] Re: postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Wietse Venema via Postfix-users
Laura Smith via Postfix-users: > Following a Debian Bookworm update I am now seeing connectivity issues that > were not present before (everything was working perfectly before) > > Postfix on the instance starts up fine, i.e. indicating no configuration > errors. > > The error is: > $ openssl s

[pfx] postfix "system library:BIO_connect:Connection refused" following Debian Bookworm update

2024-12-22 Thread Laura Smith via Postfix-users
Following a Debian Bookworm update I am now seeing connectivity issues that were not present before (everything was working perfectly before) Postfix on the instance starts up fine, i.e. indicating no configuration errors. The error is: $ openssl s_client -connect [IPV6_ADDRESS_REDACTED]:25 -sta

[pfx] Re: SASL options

2024-12-22 Thread Peter via Postfix-users
On 22/12/24 23:22, Michael Tokarev via Postfix-users wrote: Cyrus SASL is a separate thing in people minds because it is a separate, independent library/subsystem.  You can install a separate package named this way.  But in Dovecot it is an integral part of a larger system, it is not viewed like

[pfx] Communications, and thank you Wietse for clear brevity!

2024-12-22 Thread Michael Tokarev via Postfix-users
Hi! It seems that some my statements on this list are difficult to understand somehow. While I usually mean one context, my statements are being interpreted in another context. Postfix documentation has always been an excellent example of clear brevity to me, a high standard level which is almo

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 13:13, Tomasz Pala via Postfix-users wrote: Well, Cyrus is also not SASL-only... https://doc.dovecot.org/2.3/admin_manual/sasl/ is what I mean. Cyrus SASL is a separate thing in people minds because it is a separate, independent library/subsystem. You can install a separate packag

[pfx] Re: SASL options

2024-12-22 Thread Tomasz Pala via Postfix-users
On 2024-12-22 07:53, Michael Tokarev via Postfix-users wrote: > > It is not true for you, but not for most others who treat dovecot like > a mailbox storage/access solution (IMAP/POP/etc). Sure it is capable > to provide just the auth part, it's just not what people think about it. Well, Cyrus i

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 11:53, Peter via Postfix-users wrote: On 22/12/24 19:53, Michael Tokarev via Postfix-users wrote: However, there are other mechanisms being developed, for example OAUTH2, which, in terms of Cyrus SASL, does not work with saslauthd at all, I don't see why it wouldn't. saslauthd h

[pfx] Re: SASL options

2024-12-22 Thread Tomasz Pala via Postfix-users
On 2024-12-22 01:42, Peter via Postfix-users wrote: >> >> What's worth mentioning is that PLAIN/LOGIN also requires cleartext >> password storage - on the client side. > > This is not entirely true. It is possible for a client to store > passwords in an encrypted db which is decrypted with its o

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 11:53, Peter via Postfix-users wrote: [people treat dovecot sasl as part of dovecot] I realize that, but it's fairly easy to implement and easy to configure dovecot to only provide the SASL backend plus it does appear to be the most comprehensive, easiest to implement solution for SA

[pfx] Re: SASL options

2024-12-22 Thread Peter via Postfix-users
On 22/12/24 19:53, Michael Tokarev via Postfix-users wrote: 22.12.2024 03:39, Peter via Postfix-users wrote: On 22/12/24 02:54, Michael Tokarev via Postfix-users wrote: However, there are other mechanisms being developed, for example OAUTH2, which, in terms of Cyrus SASL, does not work with sa