Bug 118198
| Summary: | mail/qmail-tls port missing openssl cipher list installation | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | areilly |
| Component: | Individual Port(s) | Assignee: | Renato Botelho <garga> |
| Status: | Closed FIXED | ||
| Severity: | Affects Only Me | ||
| Priority: | Normal | ||
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
Responsible Changed From-To: freebsd-ports-bugs->garga Over to maintainer (via the GNATS Auto Assign Tool) garga 2007-12-26 16:43:55 UTC
FreeBSD ports repository
Modified files:
mail/qmail Makefile pkg-plist
mail/qmail-mysql Makefile
mail/qmail-spamcontrol Makefile
mail/qmail-tls Makefile
Added files:
mail/qmail/files extra-patch-amd64 qmail-smtpd.rcNG
Log:
- Fix a segfault on amd64 (except on qmail-spamcontrol and qmail-ldap) [1]
- Add an rcNG startup example file to QMAIL_PREFIX/boot [2]
- Bump PORTREVISION due to rcNG add (except for qmail-ldap)
- Fix make certificate to add ciphers file to QMAIL_PREFIX/control [3]
PR: ports/118117 [1], ports/117422 [2], ports/118198 [3]
Submitted by: Andrew Reilly <areilly@bigpond.net.au> [1] [3]
Nick@van-laarhoven.org [2]
Revision Changes Path
1.20 +1 -1 ports/mail/qmail-mysql/Makefile
1.23 +1 -1 ports/mail/qmail-spamcontrol/Makefile
1.22 +1 -1 ports/mail/qmail-tls/Makefile
1.126 +10 -1 ports/mail/qmail/Makefile
1.1 +20 -0 ports/mail/qmail/files/extra-patch-amd64 (new)
1.1 +52 -0 ports/mail/qmail/files/qmail-smtpd.rcNG (new)
1.17 +2 -1 ports/mail/qmail/pkg-plist
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Committed. Thanks! |
Installed /usr/ports/mail/qmail-tls (fixed as per ports/118117) and think that all is fine, but a bunch of missing mail prompted me to point first tcpdump and then openssl s_client at the new server, whereupon it became obvious that actual attempts to *use* the STARTTLS facility resulted in the ssl session dying with a message like: 2472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:596: Investigation with google found this pertinent web page: http://www.shupp.org/toaster/?page=test which contained a description of the problem (which apparently happened on Debian Linux too) and the following fix, which works for me. Fix: Per the toaster page: openssl ciphers > /var/qmail/control/tlsclientciphers openssl ciphers > /var/qmail/control/tlsserverciphers the s_client session described above now leaves you talking SMTP over the SSL link. How-To-Repeat: cd /usr/ports/mail/qmail-tls make install # edit /usr/local/openssl/openssl.cnf to suit make certificate openssl s_client -debug -crlf -starttls smtp -connect localhost:25 # notice that connection terminates immediately and #error message noted above is last thing displayed.