* Avoid hardcoding file descriptor numbers where possible.
* Include remote port number in IMAP and POP3 logs.
* Ignore SIGPIPE errors in couriertcpd, preventing couriertcpd from being
terminated if the stderr logger crashes.
* Looping SPF query should abort with SPF UNKNOWN, as per specs.
* "SSL23" tries SSLv3 before falling back to SSLv2.
* Prime the OpenSSL entropy pool on platforms that don't have a ready
source available.
not be available. Instead, use (OPEN_MAX - 1) which uses the same
"pick a high number" strategy as choosing "99", but is more likely to
be available. This allows users with a soft limit of 64 open files
to run courierfilter and courierldapaliasd.
Bump the following PKGREVISIONs:
mail/courier-mta --> 11
meta-pkgs/courier --> 7
net/couriertcpd --> 3
mail/courier-mta. Modify mail/courier-imap to build regardless of
the platforms IPv6 support and update meta-pkg/courier to the latest
versions of the Courier mail server suite. Bump the PKGREVISIONs
of the following packages:
mail/courier-mta --> 7
meta-pkgs/courier --> 3
net/couriertcpd --> 2
This fixes PR pkg/37013 by Aleksej Saushev.
a new TLS_PROTOCOL selection "SSL23" that allows for trying to negotiate
initially with SSLv3 but falling back to SSLv2:
courier/tcpd/libcouriertls.c:1.21
This allows Courier to interoperate with older mail servers and clients
that are still using SSLv2 when advertising or attempting to use
advertised STARTTLS capabilities.
This change modifies the following packages and bumps their PKGREVISIONs:
mail/courier-imap to 1.
mail/courier-mta to 6.
meta-pkgs/courier to 2.
net/couriertcpd to 1.
+ Remove BDB_LIB workaround which should already be handled by the wrapper
scripts and db1.builtin.mk.
+ Remove unnecessary patch-aa and patch-ab.
* Setting protocol to SSL3 will now disable SSL2.
* Send a dummy EHLO before STARTTLS (gmail wants it).
* Allow setting the max # of connections on a per-IP address basis.
into the Makefiles of the packages that include it:
(1) PKGNAME and PKG_SUPPORTED_OPTIONS clearly no longer need to be
defined since the only code that used it in Makefile.common was
removed.
(2) Package Makefiles need to properly define PKG_OPTIONS_VAR and
PKG_SUPPORTED_OPTIONS prior to including bsd.options.mk. Set
them to the appropriate values to match the orginal names from
before the botched migration.
SSL libraries to build couriertls, which encapsulates the logic for
handling SSL connections for Courier services. Drop the dependency
on openssl from both courier-imap and courier-mta, which only need
the "openssl" tool instead. Bump the PKGREVISIONs for all three
packages due to the changed dependencies. Problem noted by Ondrej
Tuma in private email.
net/couriertcpd.
This package contains couriertcpd(1), used to daemonize the Courier
services, and couriertls(1) used to provide TLS support for the Courier
services that support them.
