letsencrypt and SSL alert number 80

2022-12-12 Thread Alex
Hi, I'm seeing periodic entries like this in my maillog: Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library problem: error:0A000438:SSL routines::tlsv1 alert internal error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: I've searched quite a bit for more info on this er

What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Sam
Dear postfix experts: While setting up postfix in a docker container, I have been getting the error "fatal: unknown service: smtp/tcp" when attempting to send an email. I investigated the issue, and it seems it has something to do with setting up chroot in

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Wietse Venema
Sam: [ text/html is unsupported, treating like TEXT/PLAIN ] > ?html style="direction: ltr;"? > ?head? > > ?meta http-equiv="content-type" content="text/html; charset=UTF-8"? > ?style id="bidiui-paragraph-margins" type="text/css"?body p { > margin-bottom: 0cm; margin-top: 0pt; } ?/style

Re: letsencrypt and SSL alert number 80

2022-12-12 Thread Gerald Galster
> I'm seeing periodic entries like this in my maillog: > > Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library > problem: error:0A000438:SSL routines::tlsv1 alert internal > error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: [...] > smtp_tls_cert_file=/etc/letsencryp

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Sam
I apologize for the email being html-only, not my intention. I'm having trouble getting Thunderbird to do this right as I have to manually do this for every outgoing email. Can you please elaborate on what you mean with "problems of their own"? Anything specific comes to mind? This whole mov

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread postfix
I apologize for the email being html-only, not my intention. I'm having trouble getting Thunderbird to do this right as I have to manually do this for every outgoing email. Tools > Settings > Composition > Sending Format > (Automatic || Only Plain Text) and Tools > Account Settings > Com

postfix with LDAP, handles mutiple domains

2022-12-12 Thread luckydog xf
luckydog xf 11:15 AM (4 minutes ago) to postfix-users Hello, list. # Here is my ldap query bind = no version = 3 server_host = ldap://172.16.232.201:389 start_tls = no search_base = cn=users,cn=accounts,dc=ipa,dc=pthl,dc=hk scope = sub query_filter = (|(displayName=%s)(initials=%s)) result_attr

Re: postfix with LDAP, handles mutiple domains

2022-12-12 Thread Viktor Dukhovni
On Tue, Dec 13, 2022 at 11:23:55AM +0800, luckydog xf wrote: > # Here is my ldap query > bind = no > version = 3 > server_host = ldap://172.16.232.201:389 > start_tls = no > search_base = cn=users,cn=accounts,dc=ipa,dc=pthl,dc=hk > scope = sub > query_filter = (|(displayName=%s)(initials=%s)) > re

Re: letsencrypt and SSL alert number 80

2022-12-12 Thread Viktor Dukhovni
On Mon, Dec 12, 2022 at 01:27:59PM -0500, Alex wrote: > Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library > problem: error:0A000438:SSL routines::tlsv1 alert internal > error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: Some remote client encountered an internal (to i

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Fourhundred Thecat
This is not specific to postfix, but I cannot pass this opportunity to remind/inform people that chroot is itself a potential source of security vulnerabilities: Please enjoy studying this beautiful local privilege escalation bug in FreeBSD's ftpd, which was enabled by chroot jail: https://www.z