Closed windgmbh closed 3 years ago
Running this port of Postfix 3.5.11 on OPNsense 21.1.7_1 (LibreSSL) for ~ a week now. No unexpected warnings/ errors encountered so far.
I moved postfix dependency to postfix35 for 21.7.2 so we can avoid maintenance on the port ourselves. Also thanks for looking into LibreSSL compat. Doesn't look great but I suppose it just needs a bit of time. Closing this obsolete PR.
Cheers, Franco
Also thanks for looking into LibreSSL compat. Doesn't look great but I suppose it just needs a bit of time.
Thanks as well. I will observe LibreSSL developments and add them to https://github.com/opnsense/plugins/issues/2409. If it is helpful, I will do testing as soon as there's something to try out and report about it.
I have updated OPNsense's
mail/postfix
port to version 3.5.11 based on the HardenedBSD portmail/postfix35
. Because of issue #128 (OpenSSL 1.1.1 TLS 1.3 API incompatibility) we have to stay on the 3.5 branch until the issues with LibreSSL are resolved.Besides some minor fixes I may point out the following change:
This should allow us to upgrade our configuration to the 3.6 syntax already, to have a much smoother transition to Postfix 3.6 as soon as it is possible to do with LibreSSL. (I have already reported that I do not expect any major issues. https://github.com/opnsense/plugins/issues/2409).
I have built
postfix-sasl
3.5.11 sucessfully on OPNsense 21.1.7_1 based on these changes with both OpenSSL and LibreSSL.