Re: [Bug 7596] New: Update distribution to satisfy new Apache policies, including replacing SHA-1 checksums with SHA-256 or SHA-512

2018-08-22 Thread Spam Auditor

On 18-08-07 02:29 PM, bugzilla-dae...@bugzilla.spamassassin.org wrote:

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7596

 Bug ID: 7596
Summary: Update distribution to satisfy new Apache policies,
 including replacing SHA-1 checksums with SHA-256 or
 SHA-512
Product: Spamassassin
Version: 3.4 SVN branch
   Hardware: PC
 OS: Mac OS X
 Status: NEW
   Severity: normal
   Priority: P2
  Component: Building & Packaging
   Assignee: dev@spamassassin.apache.org
   Reporter: sid...@sidney.com
   Target Milestone: Undefined

See https://www.apache.org/dev/release-distribution#sigs-and-sums

We need to make sure that we confirm to the current release distribution
policies before our next release.



Can we have some clarity on 'intentions' in this regard?

Working on our modified sa-update program, and would like to know what 
version is road mapped for SHA256, and because of the need to support 
both legacy and new versions, want to build in support for both methods, 
and want to confirm that the extension will be .sha256 vs .sha1 file 
naming conventions.


Might want to suggest that a 'bridge' version might be considered, which 
can support .sha1 files as a fallback, during transition, with a version 
where .sha1 will no longer be supported.


Giving lead time will assist developers and custom 'channel' suppliers.






Re: RCVD_NUMERIC_HELO rule removal breaks lint

2018-08-22 Thread Bill Cole

On 22 Aug 2018, at 13:34, John Hardin wrote:


Giovanni:

The removal of RCVD_NUMERIC_HELO has broken the build (for me at 
least):


Checking anything
ok 1
1..2
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
ok 1
not ok 2
#   Failed test at t/basic_meta.t line 93.
# Looks like you failed 1 test of 2.


Are you still working on cleaning up the side-effects of that change?


If you rebuild the rules from a clean base, it will work. Relevant 
commits made this morning.


In trunk:

rm rules/*
svn update
make build_rules

And if you're working in the 3.4 branch, you should splice in rules, 
rulesrc, and rules-extra from trunk via symlinks or separate checkouts 
from trunk.


Re: RCVD_NUMERIC_HELO rule removal breaks lint

2018-08-22 Thread John Hardin

On Wed, 22 Aug 2018, John Hardin wrote:


Giovanni:

The removal of RCVD_NUMERIC_HELO has broken the build (for me at least):

Checking anything
ok 1
1..2
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
ok 1
not ok 2
#   Failed test at t/basic_meta.t line 93.
# Looks like you failed 1 test of 2.


Are you still working on cleaning up the side-effects of that change?


Whoops. My recompile script apparently doesn't properly clean up 
72_active.cf - never mind, local problem. Sorry for the noise.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  There is no better measure of the unthinking contempt of the
  environmentalist movement for civilization than their call to
  turn off the lights and sit in the dark.-- Sultan Knish
---
 2 days until the 1939th anniversary of the destruction of Pompeii


RCVD_NUMERIC_HELO rule removal breaks lint

2018-08-22 Thread John Hardin

Giovanni:

The removal of RCVD_NUMERIC_HELO has broken the build (for me at least):

Checking anything
ok 1
1..2
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
HELO_MISC_IP depends on RCVD_NUMERIC_HELO which is nonexistent
ok 1
not ok 2
#   Failed test at t/basic_meta.t line 93.
# Looks like you failed 1 test of 2.


Are you still working on cleaning up the side-effects of that change?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  USMC Rules of Gunfighting #4: If your shooting stance is good,
  you're probably not moving fast enough nor using cover correctly.
---
 2 days until the 1939th anniversary of the destruction of Pompeii


[Bug 7599] auth-ident support for spamd

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7599

Giovanni Bechis  changed:

   What|Removed |Added

   Target Milestone|Undefined   |3.4.3
 CC||giova...@paclan.it

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7599] New: auth-ident support for spamd

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7599

Bug ID: 7599
   Summary: auth-ident support for spamd
   Product: Spamassassin
   Version: SVN Trunk (Latest Devel Version)
  Hardware: PC
OS: OpenBSD
Status: NEW
  Severity: normal
  Priority: P2
 Component: spamc/spamd
  Assignee: dev@spamassassin.apache.org
  Reporter: giova...@paclan.it
  Target Milestone: Undefined

auth-ident support for spamd has been deprecated for a couple of releases and
should be deleted.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 4506] spamd needs to call initgroups

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4506

--- Comment #13 from Kevin A. McGrail  ---
GB, it's not a question if the code is correct.  My question is did the code
come from Tatsuo and do we have a CLA to use it.

Can you please eEmail tsek...@sdri.co.jp and ask him to submit an ICLA?  And/ir
then find the original mailing list post and look at it and ask Craig Russell
his opinion based on the verbiage and the code snippet posting.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 4446] _export_hooks() warning still present

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4446

Kevin A. McGrail  changed:

   What|Removed |Added

 Resolution|--- |WONTFIX
 Status|NEW |RESOLVED

--- Comment #7 from Kevin A. McGrail  ---
(In reply to Giovanni Bechis from comment #6)
> It does'n hurts for me with perl 5.24, but spamd --auth-ident is deprecated,
> I think we should remove support for that.

What does adding this eval add/fix?  Best I can tell nothing and there is no 
reason to re-add it.

Re: auth-ident, can you open a new bug for that and tag it for 3.4.3 unless you
can submit a patch ASAP and we'll roll it with 3.4.2.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7292] FSL_HELO_BARE_IP_* meta rule logic is wrong

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7292

--- Comment #8 from Giovanni Bechis  ---
kmcgrail, maybe CK_HELO_DYNAMIC_SPLIT_IP in your sandbox should be reconsidered
now that RCVD_NUMERIC_HELO is gone ?

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7292] FSL_HELO_BARE_IP_* meta rule logic is wrong

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7292

Giovanni Bechis  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution|--- |FIXED

--- Comment #7 from Giovanni Bechis  ---
Committed with commitid #1838621.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7587] TxRep: blocks on its own locks, intolerably slow as a result

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7587

Giovanni Bechis  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #7 from Giovanni Bechis  ---
>From my tests this has been fixed with commit #1837876.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 4506] spamd needs to call initgroups

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4506

--- Comment #12 from Giovanni Bechis  ---
It seems correct but it's too late to commit such an intrusive change,
I will review it later.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 4446] _export_hooks() warning still present

2018-08-22 Thread bugzilla-daemon
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4446

Giovanni Bechis  changed:

   What|Removed |Added

   Target Milestone|Undefined   |3.4.3

--- Comment #6 from Giovanni Bechis  ---
It does'n hurts for me with perl 5.24, but spamd --auth-ident is deprecated,
I think we should remove support for that.

-- 
You are receiving this mail because:
You are the assignee for the bug.