Package: courier-mta-ssl
Version: 0.73.1-1.6
Severity: normal

Dear Maintainer,

I have set ESMTPDSSLSTART=NO in /etc/courier/esmtpd-ssl but esmtpd-ssl
is still started and listening on port 465.

The file courier.sysvinit.in in the upstream git
(https://github.com/svarshavchik/courier/tree/master/courier)
reads /etc/courier/esmtpd-ssl and only starts /usr/sbin/esmtpd-ssl
if ESMTPDSSLSTART starts with a "y" (or "Y").

The /etc/init.d/courier-mta-ssl init script in this package
unconditionally starts esmtpd-ssl.  IMHO this is wrong.

Please add a check to /etc/init.d/courier-mta-ssl so that if only starts
esmtpd-ssl if ESMTPDSSLSTART=YES.  Just after reading
${sysconfdir}/esmtpd-ssl I added:

case x$ESMTPDSSLSTART in
x[yY]*) ;;
*) exit 0;;
esac

See the end of http://sourceforge.net/p/courier/mailman/message/31512900/

thanks
Stuart Pook


-- System Information:
Debian Release: 8.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: armel (armv5tel)

Kernel: Linux 3.16.0-4-kirkwood
Locale: LANG=en_AU.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages courier-mta-ssl depends on:
ii  courier-mta  0.73.1-1.6
ii  courier-ssl  0.73.1-1.6
ii  debconf      1.5.56

courier-mta-ssl recommends no packages.

Versions of packages courier-mta-ssl suggests:
pn  courier-doc  <none>

-- Configuration Files:
/etc/courier/esmtpd-ssl changed:
prefix=/usr
exec_prefix=/usr
BOFHCHECKDNS=1
BOFHNOEXPN=0
BOFHNOVRFY=0
TARPIT=1
NOADDMSGID=1
NOADDDATE=1
NOADDRREWRITE=0
ESMTP_LOG_DIALOG=0
AUTH_REQUIRED=0
SSLPORT=465
SSLADDRESS=0
SSLPIDFILE=/var/run/courier/esmtpd-ssl.pid
ESMTPDSSLSTART=YES
COURIERTLS=/usr/bin/couriertls
TLS_CERTFILE=/etc/courier/esmtpd.pem
TLS_DHPARAMS=/usr/lib/courier/dhparams.pem
TLS_TRUSTCERTS=/etc/ssl/certs
TLS_VERIFYPEER=NONE
MAXDAEMONS=40
MAXPERC=5
MAXPERIP=5
TLS_DHPARAMS=/etc/courier/dhparams.pem
TLS_CERTFILE=/etc/ssl/stuart/smtp.courrier-mta
TLS_TRUSTCERTS=/etc/ssl/stuart/smtp+rootCA.crt
ESMTPDSSLSTART=NO


-- no debconf information

Reply via email to