[courier-users] file /usr/include/unicode.h collides with libunicode

2015-02-27 Thread Hanno Böck
Hi Sam, courier-unicode installs a file /usr/include/unicode.h I just got a bug report from a Gentoo user that this causes trouble. There is a library libunicode that wants to install a file with the same name: https://bugs.gentoo.org/show_bug.cgi?id=541422 Can you rename that file to something

Re: [courier-users] TLS1_1 or higher ONLY?

2015-02-27 Thread Gordon Messmer
On 02/27/2015 07:16 AM, Gerald Drouillard wrote: Tried many settings and noticed that setting the TLS_PROTOCOL to anything disables 1.1 and 1.2. Tried many things including TLS_PROTOCOL=TLS1_2:TLS1_1:TLS1 An unfortunate side effect of Courier supporting multiple SSL backends is that

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-27 Thread Jan Ingvoldstad
On Fri, Feb 27, 2015 at 12:05 PM, Alessandro Vesely ves...@tana.it wrote: On Fri 27/Feb/2015 10:28:12 +0100 Jan Ingvoldstad wrote: I hoped I could, by using e.g. less to view the debug log (debug level 1) The debug log is useful for debugging, but lines get garbled if there are concurrent

Re: [courier-users] TLS1_1 or higher ONLY?

2015-02-27 Thread Gordon Messmer
On 02/27/2015 09:45 AM, Gerald Drouillard wrote: ldd /usr/bin/couriertls libssl.so.1.0.0 = /lib/x86_64-linux-gnu/libssl.so.1.0.0 (0x7f6c68c62000) So, that's OpenSSL. The documentation in the file you're editing indicates that TLSv1.1 and TLSv1.2 are valid settings for

Re: [courier-users] file /usr/include/unicode.h collides with libunicode

2015-02-27 Thread Hanno Böck
On Fri, 27 Feb 2015 18:46:23 +0100 Hanno Böck ha...@hboeck.de wrote: courier-unicode installs a file /usr/include/unicode.h Addition: It's more than that, /usr/lib/libuncode.* also collides. So I think both should be renamed (something like /usr/lib/libunicode-courier.* or

[courier-users] TLS1_1 or higher ONLY?

2015-02-27 Thread Gerald Drouillard
Seems that a recent PCI scan is encouraging the use of TLS 1.1 or higher because of the BEAST attack. Tried many settings and noticed that setting the TLS_PROTOCOL to anything disables 1.1 and 1.2. Tried many things including TLS_PROTOCOL=TLS1_2:TLS1_1:TLS1 Anybody have any luck?

Re: [courier-users] TLS1_1 or higher ONLY?

2015-02-27 Thread Gordon Messmer
Please keep replies on the list. I can't give you authoritative answers, and right now I'm the only one seeing your messages. Courier's rpms build against GnuTLS by default (under mock), so I don't have an installation similar enough to yours to test specific settings. On 02/27/2015 10:54

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-27 Thread Jan Ingvoldstad
On Tue, Feb 24, 2015 at 5:28 PM, Jan Ingvoldstad frett...@gmail.com wrote: If not the IP address, it would be nice to have some sort of unique session ID or similar for the logs, so that you could do single or dual pass parsing of logs. As it is now, log parsing is somewhat tedious.

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-27 Thread Alessandro Vesely
On Fri 27/Feb/2015 10:28:12 +0100 Jan Ingvoldstad wrote: I hoped I could, by using e.g. less to view the debug log (debug level 1) The debug log is useful for debugging, but lines get garbled if there are concurrent logins, and it's not quite machine-readable. [DATE] [host] imapd: LOGIN

Re: [courier-users] file /usr/include/unicode.h collides with libunicode

2015-02-27 Thread Sam Varshavchik
Hanno Böck writes: On Fri, 27 Feb 2015 18:46:23 +0100 Hanno Böck ha...@hboeck.de wrote: courier-unicode installs a file /usr/include/unicode.h Addition: It's more than that, /usr/lib/libuncode.* also collides. So I think both should be renamed (something like /usr/lib/libunicode-courier.*

Re: [courier-users] TLS1_1 or higher ONLY?

2015-02-27 Thread Sam Varshavchik
Gordon Messmer writes: On 02/27/2015 09:45 AM, Gerald Drouillard wrote: ldd /usr/bin/couriertls libssl.so.1.0.0 = /lib/x86_64-linux-gnu/libssl.so.1.0.0 (0x7f6c68c62000) So, that's OpenSSL. The documentation in the file you're editing indicates that TLSv1.1 and TLSv1.2 are