Re: OpenSMTPD 7.3.0p0 rc1 -- please test!

[Richard Narron]

On Thu, 1 Jun 2023, Richard Narron wrote:

> I will modify the build to remove the --with-path-CAfile
> configure option and add a symbolic link for /etc/ssl/cert.pem

The symbolic link in my build is not good idea because
it erases the cert.pem file which may be in use by other applications.

I am better off patching the OpenSMTPD source code instead.

Why is the --with-path-CAfile option removed?

Re: OpenSMTPD 7.3.0p0 rc1 -- please test!

[gilles]

awesome work from Omar Polo, thanks for everything

May 31, 2023 6:14 PM, "Omar Polo"  wrote:

> Hello,
> 
> It's been a while since the last OpenSMTPD-portable release, but here
> we are. After syncing the portable repository with OpenBSD, plus
> various miscellaneous portable tweaks, I've talked with Gilles and we
> both agree it's finally time for a release.
> 
> I intend to release OpenSMTPD 7.3.0p0 in the next few weeks, around
> mid June, so I would appreciate if you could give the rc1 a try and
> confirm that it works as expected. You can find a distribution
> tarball here, or checkout the release-7.3 branch:
> 
> https://github.com/OpenSMTPD/OpenSMTPD/releases/download/7.3.0p0-rc1/opensmtpd-7.3.0p0-rc1.tar.gz
> 
> Since last release various things changed, and some configure flags
> are not present anymore (e.g. --with-path-CAfile). libbsd-overlay and
> libretls are now optionally used if found.
> 
> PLEASE NOTE: if you're building with OpenSSL 3.x please use
> 
> $ ./configure --with-bundled-libtls
> 
> LibreTLS 3.7.0 and previous have a regression with OpenSSL 3.x that
> will always fail the TLS handshake. It has been addressed in LibreSSL
> 3.8.0 and will likely be part of a future LibreTLS release, but for
> the time being please avoid it. If linking against OpenSSL 1.1 it
> should be fine however. See the github issue 1171 for more info:
> 
> https://github.com/OpenSMTPD/OpenSMTPD/issues/1171
> 
> Thanks,
> 
> Omar Polo

Re: OpenSMTPD 7.3.0p0 rc1 -- please test!

[Richard Narron]

OpenSMTPD 7.3.0p0 rc1 builds okay on Slackware 15.0 (stable) but displays
this configure warning message:

  configure: WARNING: unrecognized options: --with-path-CAfile

Testing smtpd failed at first

The program started, but stopped immediately with an error message:

smtpd[10147]: info: OpenSMTPD 7.3.0-portable starting
smtpd[10152]: dispatcher: tls_config_set_ca_file: failed to open CA file 
'/etc/ssl/cert.pem': No such file or directory
smtpd[10148]: smtpd: process control socket closed

Slackware 15.0 does not have an /etc/ssl/cert.pem file, but does have a
ca-certificates.crt file...

So I created a symbolic link from /etc/ssl/cert.pem to the
ca-certificates.crt file and smtpd now starts up fine.

It works with simple local email.

I will modify the build to remove the --with-path-CAfile
configure option and add a symbolic link for /etc/ssl/cert.pem

I will keep testing and see if it breaks...