Thanks Jan for this bug report. I can indeed reproduce the issue; using
LXD containers the easiest steps are the following:

1. Launch a clean Eoan container
2. `apt install postfix` with "Local only" config, accept all the defaults
3. Run: `posttls-finger -c gmail.com`. The TLS connection succeeds. The result 
will be a "certificate verification failed [...] untrusted issuer" but this is 
because a trust anchor was not setup (I think). The tool works as expected

4. Launch a clean Focal container and install postfix in the same way.
5. Again, run: `posttls-finger -c gmail.com`. The output is:

root@paride-f:~# posttls-finger -c gmail.com
posttls-finger: warning: connect to private/tlsmgr: No such file or directory
posttls-finger: warning: connect to private/tlsmgr: No such file or directory
posttls-finger: warning: problem talking to server private/tlsmgr: No such file 
or directory
posttls-finger: warning: no entropy for TLS key generation: disabling TLS 
support

which is clearly wrong.

The postfix package is a sync from Debian, but unfortunately Debian sid
is ahead of it, while Debian Buster is behind it, so I can't immediately
test how the same version of the package behaves on Debian. However the
problem is *not* present in Debian sid or Buster, nor I could find a
Debian bug referencing to it.


** Tags added: server-next

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868955

Title:
  after upgrade to 20.04: posttls cannot connect to private/tlsmgr

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1868955/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to