Re: [OpenSMTPD] portable snapshot opensmtpd-201312131550p1 available

2013-12-14 Thread Denis Fateyev
At least, now it is built without errors ;-)

---
wbr, Denis.


> Perhaps related to recent SNI changes. With earlier snapshot
> (201312081717)
> > and 5.4.1 release everything was OK.
> >
>
> Latest snapshot has a quick fix, I'll improve this week since I intend
> to continue work in that area
>
> --
> Gilles Chehade
>
> https://www.poolp.org  @poolpOrg
>


Re: [OpenSMTPD] portable snapshot opensmtpd-201312131550p1 available

2013-12-14 Thread Gilles Chehade
On Sat, Dec 14, 2013 at 01:21:17AM +0600, Denis Fateyev wrote:
> 
> --
> gcc -DHAVE_CONFIG_H -I. -I../..  -I../../smtpd -I../../openbsd-compat
> -I../../contrib/lib/libc/asr -I.  -DSMTPD_CONFDIR=\"/etc/opensmtpd\"
> -DPATH_CHROOT=\"/var/empty/smtpd\" -DPATH_SMTPCTL=\"/usr/sbin/smtpctl\"
> -DPATH_MAILLOCAL=\"/usr/libexec/opensmtpd/mail.local\"
> -DPATH_FILTERS=\"/usr/libexec/opensmtpd\"
> -DPATH_TABLES=\"/usr/libexec/opensmtpd\" -DHAVE_CONFIG_H -DIO_SSL
> -DASR_OPT_THREADSAFE=0 -DCA_FILE=\"/etc/pki/tls/cert.pem\" -g
> -I/usr/include/libdb4  -fPIC -DPIC -Wall -Wpointer-arith -Wuninitialized
> -Wsign-compare -Wformat-security -Wno-pointer-sign -fno-strict-aliasing
> -fno-builtin-memset -std=gnu99  -D_GNU_SOURCE -MT smtpd-smtpd.o -MD -MP -MF
> .deps/smtpd-smtpd.Tpo -c -o smtpd-smtpd.o `test -f '../../smtpd/smtpd.c' ||
> echo './'`../../smtpd/smtpd.c
> cc1: warning: -Wuninitialized is not supported without -O
> ../../smtpd/smtp_session.c: In function 'smtp_sni_callback':
> ../../smtpd/smtp_session.c:1753: warning: implicit declaration of function
> 'SSL_get_servername'
> ../../smtpd/smtp_session.c:1753: error: 'TLSEXT_NAMETYPE_host_name'
> undeclared (first use in this function)
> ../../smtpd/smtp_session.c:1753: error: (Each undeclared identifier is
> reported only once
> ../../smtpd/smtp_session.c:1753: error: for each function it appears in.)
> ../../smtpd/smtp_session.c:1753: warning: assignment makes pointer from
> integer without a cast
> ../../smtpd/smtp_session.c:1755: error: 'SSL_TLSEXT_ERR_NOACK' undeclared
> (first use in this function)
> ../../smtpd/smtp_session.c:1765: warning: implicit declaration of function
> 'SSL_set_SSL_CTX'
> ../../smtpd/smtp_session.c:1766: error: 'SSL_TLSEXT_ERR_OK' undeclared
> (first use in this function)
> ../../smtpd/smtp_session.c:1767: warning: control reaches end of non-void
> function
> make[3]: *** [smtpd-smtp_session.o] Error 1
> make[3]: *** Waiting for unfinished jobs
> ../../smtpd/smtpd.c: In function 'parent_auth_pam':
> ../../smtpd/smtpd.c:1526: warning: initialization from incompatible pointer
> type
> ../../smtpd/smtpd.c:1526: warning: initialization discards qualifiers from
> pointer target type
> mv -f .deps/smtpd-smtpd.Tpo .deps/smtpd-smtpd.Po
> make[3]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1/mk/smtpd'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1/mk'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1'
> make: *** [all] Error 2
> --
> 
> Perhaps related to recent SNI changes. With earlier snapshot (201312081717)
> and 5.4.1 release everything was OK.
> 

Latest snapshot has a quick fix, I'll improve this week since I intend
to continue work in that area

-- 
Gilles Chehade

https://www.poolp.org  @poolpOrg

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



[OpenSMTPD] portable snapshot opensmtpd-201312142054p1 available

2013-12-14 Thread gilles
User gilles has just rebuilt a portable snapshot, available from:

http://www.OpenSMTPD.org/archives/opensmtpd-201312142054p1.tar.gz

Checksum:

  SHA256 (opensmtpd-201312142054p1.tar.gz) =
  1ba9763825373a7fc5eb405117bfb0329cf360ea7839006632f30f144abf4e1c

A summary of the content of this snapshot is available below.

Please test and let us know if it breaks something!

If this snapshot doesn't work, please also test with a previous one,
to help us spot where the issue is comming from. You can access all
previous snapshots here:

http://www.opensmtpd.org/archives/

The OpenSMTPD team ;-)


Summary of changes since last snapshot (opensmtpd-201312131550p1):
-

- only enable SNI if OpenSSL supports it [quick fix, better one coming soon]
- remove penalty from envelope in scheduler backend
- woops, API change not propagated to mda.c

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



[OpenSMTPD] master snapshot opensmtpd-201312142053 available

2013-12-14 Thread gilles
User gilles has just rebuilt a master snapshot, available from:

http://www.OpenSMTPD.org/archives/opensmtpd-201312142053.tar.gz

Checksum:

  SHA256 (opensmtpd-201312142053.tar.gz) =
  8cd6ca374929855f67a788cc62fcdb820e983296989f7b45f12aeb895355c5b9

A summary of the content of this snapshot is available below.

Please test and let us know if it breaks something!

If this snapshot doesn't work, please also test with a previous one,
to help us spot where the issue is comming from. You can access all
previous snapshots here:

http://www.opensmtpd.org/archives/

The OpenSMTPD team ;-)


Summary of changes since last snapshot (opensmtpd-201312131547):
---

- woops, API change not propagated to mda.c breaking build

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Macro expansion

2013-12-14 Thread John Cox
I tried to use this:

  smarthost = "smarthost.example.net"

  from any relay via tls://$smarthost

however from the debug it looks like the macro did not expand and
(unsurprisingly) the system couldn't find the system "$smarthost" to
relay to.  Should this work or is the macro prevented from expanding
due to not being preceded by whitespace?

Could I use a macro for a longer bit of syntax e.g.

  smart_relay = "relay via tls://smarthost.example.net pki
smarthost.example.net verify"

  from any smart_relay

And if so (a) how can I get quotes into a macro and (b) can I use
other macros inside a macro?

Many thanks

John Cox

--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: [OpenSMTPD] portable snapshot opensmtpd-201312131550p1 available

2013-12-14 Thread Denis Fateyev
Surely, it's older because RHEL5 and its derivatives come with openssl
version 0.9.8e.

As for more recent openssl, I don't see any problems with the latest
snapshot on RHEL6 and Fedora.

---
wbr, Denis.


On Sat, Dec 14, 2013 at 6:23 PM, Gilles Chehade  wrote:

> On Sat, Dec 14, 2013 at 01:21:17AM +0600, Denis Fateyev wrote:
> >
> > Latest snapshot failed during build on RHEL5 with errors:
> >
> > --
> >  [ skipped ]
> > --
> >
> > Perhaps related to recent SNI changes. With earlier snapshot
> (201312081717)
> > and 5.4.1 release everything was OK.
> >
>
> Definitely related to the SNI change, either we're missing a header or
> you're OpenSSL version is older than mine...
>
> What version are you running ?
>
>


Re: [OpenSMTPD] portable snapshot opensmtpd-201312131550p1 available

2013-12-14 Thread Gilles Chehade
On Sat, Dec 14, 2013 at 01:21:17AM +0600, Denis Fateyev wrote:
> 
> Latest snapshot failed during build on RHEL5 with errors:
> 
> --
> gcc -DHAVE_CONFIG_H -I. -I../..  -I../../smtpd -I../../openbsd-compat
> -I../../contrib/lib/libc/asr -I.  -DSMTPD_CONFDIR=\"/etc/opensmtpd\"
> -DPATH_CHROOT=\"/var/empty/smtpd\" -DPATH_SMTPCTL=\"/usr/sbin/smtpctl\"
> -DPATH_MAILLOCAL=\"/usr/libexec/opensmtpd/mail.local\"
> -DPATH_FILTERS=\"/usr/libexec/opensmtpd\"
> -DPATH_TABLES=\"/usr/libexec/opensmtpd\" -DHAVE_CONFIG_H -DIO_SSL
> -DASR_OPT_THREADSAFE=0 -DCA_FILE=\"/etc/pki/tls/cert.pem\" -g
> -I/usr/include/libdb4  -fPIC -DPIC -Wall -Wpointer-arith -Wuninitialized
> -Wsign-compare -Wformat-security -Wno-pointer-sign -fno-strict-aliasing
> -fno-builtin-memset -std=gnu99  -D_GNU_SOURCE -MT smtpd-smtpd.o -MD -MP -MF
> .deps/smtpd-smtpd.Tpo -c -o smtpd-smtpd.o `test -f '../../smtpd/smtpd.c' ||
> echo './'`../../smtpd/smtpd.c
> cc1: warning: -Wuninitialized is not supported without -O
> ../../smtpd/smtp_session.c: In function 'smtp_sni_callback':
> ../../smtpd/smtp_session.c:1753: warning: implicit declaration of function
> 'SSL_get_servername'
> ../../smtpd/smtp_session.c:1753: error: 'TLSEXT_NAMETYPE_host_name'
> undeclared (first use in this function)
> ../../smtpd/smtp_session.c:1753: error: (Each undeclared identifier is
> reported only once
> ../../smtpd/smtp_session.c:1753: error: for each function it appears in.)
> ../../smtpd/smtp_session.c:1753: warning: assignment makes pointer from
> integer without a cast
> ../../smtpd/smtp_session.c:1755: error: 'SSL_TLSEXT_ERR_NOACK' undeclared
> (first use in this function)
> ../../smtpd/smtp_session.c:1765: warning: implicit declaration of function
> 'SSL_set_SSL_CTX'
> ../../smtpd/smtp_session.c:1766: error: 'SSL_TLSEXT_ERR_OK' undeclared
> (first use in this function)
> ../../smtpd/smtp_session.c:1767: warning: control reaches end of non-void
> function
> make[3]: *** [smtpd-smtp_session.o] Error 1
> make[3]: *** Waiting for unfinished jobs
> ../../smtpd/smtpd.c: In function 'parent_auth_pam':
> ../../smtpd/smtpd.c:1526: warning: initialization from incompatible pointer
> type
> ../../smtpd/smtpd.c:1526: warning: initialization discards qualifiers from
> pointer target type
> mv -f .deps/smtpd-smtpd.Tpo .deps/smtpd-smtpd.Po
> make[3]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1/mk/smtpd'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1/mk'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory
> `/home/mock/rpmbuild/BUILD/opensmtpd-201312131550p1'
> make: *** [all] Error 2
> --
> 
> Perhaps related to recent SNI changes. With earlier snapshot (201312081717)
> and 5.4.1 release everything was OK.
> 

Definitely related to the SNI change, either we're missing a header or
you're OpenSSL version is older than mine...

What version are you running ?


-- 
Gilles Chehade

https://www.poolp.org  @poolpOrg

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org