search

opnsense / ports

OPNsense ports on top of FreeBSD
https://opnsense.org/
Other
157 stars 114 forks source link

mail/postfix: Update to Postfix 3.5.11 #130

Closed windgmbh closed 3 years ago

windgmbh commented 3 years ago

I have updated OPNsense's mail/postfix port to version 3.5.11 based on the HardenedBSD port mail/postfix35. Because of issue #128 (OpenSSL 1.1.1 TLS 1.3 API incompatibility) we have to stay on the 3.5 branch until the issues with LibreSSL are resolved.

Besides some minor fixes I may point out the following change:

Support for Postfix 3.6 compatibility_level syntax, to avoid fatal runtime errors when rolling back from Postfix 3.6 to an earlier supported version, or when sharing Postfix 3.6 configuration files with an earlier supported Postfix version.

This should allow us to upgrade our configuration to the 3.6 syntax already, to have a much smoother transition to Postfix 3.6 as soon as it is possible to do with LibreSSL. (I have already reported that I do not expect any major issues. https://github.com/opnsense/plugins/issues/2409).

I have built postfix-sasl 3.5.11 sucessfully on OPNsense 21.1.7_1 based on these changes with both OpenSSL and LibreSSL.

windgmbh commented 3 years ago

Running this port of Postfix 3.5.11 on OPNsense 21.1.7_1 (LibreSSL) for ~ a week now. No unexpected warnings/ errors encountered so far.

fichtner commented 3 years ago

I moved postfix dependency to postfix35 for 21.7.2 so we can avoid maintenance on the port ourselves. Also thanks for looking into LibreSSL compat. Doesn't look great but I suppose it just needs a bit of time. Closing this obsolete PR.

Cheers, Franco

windgmbh commented 3 years ago

Also thanks for looking into LibreSSL compat. Doesn't look great but I suppose it just needs a bit of time.

Thanks as well. I will observe LibreSSL developments and add them to https://github.com/opnsense/plugins/issues/2409. If it is helpful, I will do testing as soon as there's something to try out and report about it.