First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 94257
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Qmail Team <qmail-bugs@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Alin Năstac <mrness@gentoo.org>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
  ()

Filename Description Type Creator Created Size Actions
servercert-by-TCPLOCALHOST-or-TCPLOCALIP.patch servercert-by-TCPLOCALHOST-or-TCPLOCALIP.patch patch Alin Năstac 2005-05-28 02:09 0000 2.10 KB Details | Diff
qmail-1.03-env-servercert.patch qmail-1.03-env-servercert.patch patch Alin Năstac 2005-06-05 22:29 0000 1.27 KB Details | Diff
qmail-1.03-env-servercert.patch qmail-1.03-env-servercert.patch patch Alin Năstac 2005-06-05 22:36 0000 1.28 KB Details | Diff
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 94257 depends on: Show dependency tree
Bug 94257 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2005-05-28 02:06 0000 
I've made a patch which enables usage of different TLS certificates depending
on TCPLOCALHOST or TCPLOCALIP.
The patch could be safely applied independently of the USE flags.

qmail-smtpd will roughly work as follows:
  CERTFILE = ""
  if $TCPLOCALHOST != "" 
    if "control/servercert-$TCPLOCALHOST.pem" exists
      CERTFILE = "control/servercert-$TCPLOCALHOST.pem"
  else if $TCPLOCALIP != ""
    if "control/servercert-$TCPLOCALIP.pem" exists
      CERTFILE = "control/servercert-$TCPLOCALIP.pem"

  if $CERTFILE == ""
    CERTFILE = "control/servercert.pem"

------- Comment #1 From Alin Năstac 2005-05-28 02:09:10 0000 ------- 
Created an attachment (id=60001) [details]
servercert-by-TCPLOCALHOST-or-TCPLOCALIP.patch

This patch works for me on x86 arch - tested for 2 months.

------- Comment #2 From Michael Hanselmann (hansmi) (RETIRED) 2005-06-05 08:00:55 0000 ------- 
Can you please provide a patch that applies to qmail-1.03-r16? Preferably after
the famd-dnotify patch. The TLS patch has been heavily updated for r16, so
things are different. r15 will not be updated because it's the stable version
for all architectures. Thanks!

------- Comment #3 From Alin Năstac 2005-06-05 22:29:05 0000 ------- 
Created an attachment (id=60707) [details]
qmail-1.03-env-servercert.patch

this patch is ment to be applied to the current mail-mta/qmail-1.03-r16

it enables configuration of the servercert used by qmail-smtpd daemon through
SMTP_SERVERCERT env var.

------- Comment #4 From Alin Năstac 2005-06-05 22:33:21 0000 ------- 
indeed, TLS patch has been redesigned.
it looks better, btw.

------- Comment #5 From Alin Năstac 2005-06-05 22:36:53 0000 ------- 
Created an attachment (id=60708) [details]
qmail-1.03-env-servercert.patch

correct the comment

------- Comment #6 From Michael Hanselmann (hansmi) (RETIRED) 2005-06-12 12:54:19 0000 ------- 
Added to qmail-1.03-r16. Can you test it, please?

------- Comment #7 From Alin Năstac 2005-06-14 00:15:28 0000 ------- 
TLS part works as expected.
However, AUTH part refuse to work for some strange reason.

I will analyse later, since I do not have the time to do it right now.
First Last Prev Next    No search results available      Search page      Enter new bug