Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Scott Kitterman
I received the bug report/patch below from a Debian user. I'm somewhat busy this weekend/week, so I decided to forward it without evaluation rather than sit on it for a week until I could research it. I attempted to remove the distro specific noise from the report. Scott K Package: postfix

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Wietse Venema
Scott Kitterman: > I received the bug report/patch below from a Debian user. I'm somewhat busy > this weekend/week, so I decided to forward it without evaluation rather than > sit on it for a week until I could research it. > > I attempted to remove the distro specific noise from the report. S

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Scott Kitterman
On Sunday, March 10, 2019 11:11:15 AM Wietse Venema wrote: > Scott Kitterman: > > I received the bug report/patch below from a Debian user. I'm somewhat > > busy this weekend/week, so I decided to forward it without evaluation > > rather than sit on it for a week until I could research it. > > >

Re: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Postfix User
On Sun, 10 Mar 2019 11:11:15 -0400 (EDT), Wietse Venema stated: >Scott Kitterman: >> I received the bug report/patch below from a Debian user. I'm >> somewhat busy this weekend/week, so I decided to forward it without >> evaluation rather than sit on it for a week until I could research >> it. >>

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread PGNet Dev
To add a possible data point to the convo, at least one distro, OpenSUSE, is already toying with apparently poorly thought-thru patches (aka, not vetted/source here, from upstream) -- e,g, here, https://build.opensuse.org/package/view_file/openSUSE:Factory/postfix/postfix-linux45.patch?expand=

Re: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Postfix User
On Sun, 10 Mar 2019 11:41:01 -0400, Scott Kitterman stated: >On Sunday, March 10, 2019 11:11:15 AM Wietse Venema wrote: >> Scott Kitterman: >> > I received the bug report/patch below from a Debian user. I'm >> > somewhat busy this weekend/week, so I decided to forward it >> > without evaluation

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Wietse Venema
Scott Kitterman: > On Sunday, March 10, 2019 11:11:15 AM Wietse Venema wrote: > > Scott Kitterman: > > > I received the bug report/patch below from a Debian user. I'm somewhat > > > busy this weekend/week, so I decided to forward it without evaluation > > > rather than sit on it for a week until I

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Viktor Dukhovni
On Sun, Mar 10, 2019 at 02:34:02PM +, Scott Kitterman wrote: > This worked just fine until 3.3.2-4 inclusive but since I've upgraded > my sid system yesterday and Postfix was upgraded to 3.4.1-1 I see: > > postfix/smtp[15202]: warning: Trust anchor files not supported > postfix/smtp[15202

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Viktor Dukhovni
On Sun, Mar 10, 2019 at 12:29:44PM -0400, Wietse Venema wrote: > > My preference would be to press on with 3.4 (I don't mind packaging the bug > > fixes if you don't mind releasing them), but if you are going to withdraw > > 3.4 > > please do it before next Sunday so I can keep it out of the ne

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Mar 10, 2019 at 12:29:44PM -0400, Wietse Venema wrote: > > > > My preference would be to press on with 3.4 (I don't mind packaging the > > > bug > > > fixes if you don't mind releasing them), but if you are going to withdraw > > > 3.4 > > > please do it before next S

Postfix stable release 3.4.2

2019-03-10 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.4.2.html] Postfix stable release 3.4.2 is available. * DANE trust anchor file support was broken after the Postfix 3.4 TLS library overhaul. Fix by Scott Kitterman. * LINUX5 is su

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Daniele Nicolodi
On 10/03/2019 15:07, Wietse Venema wrote: > You are looking from the "we made improvements" angle. I am looking > from the "with hard work, we introduce 1 bug in 1000 lines of new > code" angle. > > In the TLS library there were 1039 additions and 559 deletions from > Postfix 3.3.3 to 3.4.1 (diff

Re: Postfix stable release 3.4.2

2019-03-10 Thread Francesc Peñalvez
when will this version be published? on the web is not yet the source or the change list * Este mensaje y todos los archivos adjuntos son confidenciales y de uso exclusivo por parte de su/sus destina

Re: Fwd: Bug#924183: postfix: Trust anchor files (tafile=) in TLS policy break secure level email delivery

2019-03-10 Thread Wietse Venema
Daniele Nicolodi: > On 10/03/2019 15:07, Wietse Venema wrote: > > You are looking from the "we made improvements" angle. I am looking > > from the "with hard work, we introduce 1 bug in 1000 lines of new > > code" angle. > > > > In the TLS library there were 1039 additions and 559 deletions from >

Re: Postfix stable release 3.4.2

2019-03-10 Thread Wietse Venema
Francesc Pe?alvez: > when will this version be published? on the web is not yet the source or > the change list It is released on www.porcupine.org. If you get it from a Postfix mirror, then you will have to wait up to 24 hours. Wietse

Re: Postfix stable release 3.4.2

2019-03-10 Thread Francesc Peñalvez
there is an error in that web if i choose the link of wietse own site the link download is this ftp://ftp.porcupine.org/mirrors/postfix-release/index.html * Este mensaje y todos los archivos adjuntos

Re: Postfix stable release 3.4.2

2019-03-10 Thread Francesc Peñalvez
Is there a simple way to make a deb package from source or do an update from a deb package? * Este mensaje y todos los archivos adjuntos son confidenciales y de uso exclusivo por parte de su/sus dest

Re: Postfix stable release 3.4.2

2019-03-10 Thread Wietse Venema
Francesc Pe?alvez: > Is there a simple way to make a deb package from source or do an update > from a deb package? Postfix is platform neutral, so I don't do deb, rpm, pkg, or other package managers. That is the job for distibutions. Wietse

Re: Postfix stable release 3.4.2

2019-03-10 Thread Wietse Venema
Francesc Pe?alvez: > there is an error in that web if i choose the link of wietse own site > the link download is this > ftp://ftp.porcupine.org/mirrors/postfix-release/index.html Using Chrome? use http://ftp.porcupine.org/mirrors/postfix-release/index.html Wietse

Re: Postfix stable release 3.4.2

2019-03-10 Thread @lbutlr
Please stop sending this nonsense to the list. > On 10 Mar 2019, at 17:21, Francesc Peñalvez wrote: > > * > Este mensaje y todos los archivos adjuntos son confidenciales y de uso > exclusivo por part

Re: Postfix stable release 3.4.2

2019-03-10 Thread PGNet Dev
On 3/10/19 3:19 PM, Wietse Venema wrote: >* LINUX5 is supported, based on sanity checks with a Rawhide > prerelease. fyi, still cd postfix-3.4.2 make tidy make -f Makefile.in MAKELEVEL= Makefiles (echo "# Do not edit -- this file d

Re: Postfix stable release 3.4.2

2019-03-10 Thread Francesc Peñalvez
sure i use it thanks!! the question of whether there is a simple way to make a deb package, is that I have a somewhat complicated configuration and I would not like to lose it or run two postfix one in the local directory and the deb package in normal sbin, so I asked if there is some simple w

Re: Postfix stable release 3.4.2

2019-03-10 Thread Wietse Venema
PGNet Dev: > On 3/10/19 3:19 PM, Wietse Venema wrote: > >* LINUX5 is supported, based on sanity checks with a Rawhide > > prerelease. > > fyi, still Sorry, I forgot to update the makedefs script. Wietse

Re: Postfix stable release 3.4.2

2019-03-10 Thread Francesc Peñalvez
Sorry its my firm,i erease when send mail to this list smime.p7s Description: Firma criptográfica S/MIME

Postfix stable release 3.4.3

2019-03-10 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.4.3.html] Postfix stable release 3.4.3 is available. One of the Postfix 3.4.2 changes (LINUX5) was missing. For your convenience, the remainder of this text repeats the content of the Post

Re: Postfix stable release 3.4.2

2019-03-10 Thread Benny Pedersen
Francesc Peñalvez skrev den 2019-03-11 00:44: Sorry its my firm,i erease when send mail to this list and there is freemail where forced signatures is not done

Re: TLS client certificates and auth external

2019-03-10 Thread Matthew Horan
> On Jan 8, 2019, at 5:17 PM, Bastian Schmidt <[hidden email]> wrote: > > I have an email client (K-9 on Android), which, when using TLS client > certificates insists on sending an auth external. However, postfix/SASL > does not advertise external auth, which causes the client to not being > able