Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 52496 - /etc/init.d/courier-imapd-ssl hardcodes certificate location in check (and shouldn't)
Summary: /etc/init.d/courier-imapd-ssl hardcodes certificate location in check (and sh...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-05-30 15:38 UTC by Roger Binns
Modified: 2004-06-27 03:12 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
this patch fixes /etc/init.d/imapd-ssl (courier-imapd-ssl.patch,840 bytes, patch)
2004-06-25 06:32 UTC, Jaco Kroon
Details | Diff
and this one /etc/init.d/courier-pop3d-ssl (courier-pop3d-ssl.patch,840 bytes, patch)
2004-06-25 06:33 UTC, Jaco Kroon
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Roger Binns 2004-05-30 15:38:33 UTC
/etc/init.d/courier-imapd-ssl refuses to start unless there is a certificate as /etc/courier-imap/imapd.pem.

I have editted /etc/courier-imap/imapd to point TLS_CERTFILE at my certificate (since so many pieces of software use certificates on the same host, I point them all at the same file which is /etc/certs/the.relevant.name.pem)

The script should be sourcing the config file and checking $TLS_CERTFILE rather than the hard coded location.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-05-30 23:06:24 UTC
post up patches for both imapd-ssl and pop3d-ssl and i'll get to it sooner than if i need to write it up myself.
Comment 2 Jaco Kroon 2004-06-25 06:32:42 UTC
Created attachment 34132 [details, diff]
this patch fixes /etc/init.d/imapd-ssl
Comment 3 Jaco Kroon 2004-06-25 06:33:48 UTC
Created attachment 34133 [details, diff]
and this one /etc/init.d/courier-pop3d-ssl
Comment 4 Jaco Kroon 2004-06-25 06:35:08 UTC
Oops, I see I made a typo in my comment on the first upload.  Anyway, these patches work by simply first sourcing the config file and then testing whether "${TLS_CERTFILE}" exists instead of the hardcoded location.
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-06-26 16:04:29 UTC
in cvs for the 3.0.5 release.
Comment 6 Jaco Kroon 2004-06-27 03:04:49 UTC
That is still a *long* way off.  Stable is still at 3.0.2 (-r1 is still masked on x86 - what's the reason for that?).  Then there is 3.0.4 (also still ~x86) only and after that 3.0.5.  Is there any particular reason why these patches can't go into 3.0.4 already?  Or even 3.0.2-r1?
Comment 7 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-06-27 03:12:22 UTC
3.0.4 was a bust upstream, it broke some more stuff, but fixed bugs that were in 3.0.2. 3.0.5 is back to where the stable line should be, so i'll be moving it into stable in a week or less, provided no further issues are reported with it.