Hi all,

fixed in assp 2.8.2 *SPAM-Eliminator* build 25042:

- Requesting a change of the OpenSSL-securitiy-level for all or a specific 
SSL-context may caused the SSL-context creation to fail.
  In some cases the SMTP-Worker was crashing with a SEGV error on such a 
request, because assp was using a wrong context pointer.

- The resend of a SMIME signed mail may led into a failing SMIME-signature 
check at the users mail client, because of a wrong correction
  or setting of the mail end sequence [CRLF.CRLF]

- A zero byte long file in the resend folder caused an infinity looping of 
the Maintenance-Thread (10000)


changed:

'SSL_cipher_list' description added
... The openssl-security-level may be set using something like 
'DEFAULT:@SECLEVEL=0' 
(e.g. in case SSL/TLS is no longer working after upgrading openssl from 
V1.x.x to V3.x.x - 
read the openssl documentation for SSL_CTX_get_security_level and 
SSL_CTX_set_security_level ).
Setting the security level of openssl to zero is highly NOT recommended 
and should be only used as a temporary solution

Thomas

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to