Package: courier-mta
Version: 1.0.6-1
Severity: critical
Justification: causes serious data loss
the mkesmtpdcert pgrogram in debian was altered, BUT are not in sync
around documentations.. that may cause confusion and data loss due
admins does not find resulting cert file and daemons does not start
never:
root@mail:/etc/courier# man mkesmtpdcert | grep pem
/usr/lib/courier/esmtpd.pem. The mkesmtpdcert generates a
self-signed X.509 certificate, mainly for testing.
/usr/lib/courier/esmtpd.pem must be owned by the courier user
and have no group or world permissions. The
/usr/lib/courier/esmtpd.pem already exists.
root@mail:/etc/courier# mkesmtpdcert
/etc/courier/esmtpd.pem already exists.
root@mail:/etc/courier#
Lenz McKAY Gerardo (PICCORO)
http://qgqlochekone.blogspot.com
