CVS commit: [netbsd-6] src/external/ibm-public/postfix/dist

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

Module Name:    src
Committed By:   bouyer
Date:           Sun Oct 20 12:58:26 UTC 2013

Modified Files:
        src/external/ibm-public/postfix/dist [netbsd-6]: HISTORY RELEASE_NOTES
        src/external/ibm-public/postfix/dist/src/global [netbsd-6]:
            mail_version.h
        src/external/ibm-public/postfix/dist/src/local [netbsd-6]: forward.c
        src/external/ibm-public/postfix/dist/src/tls [netbsd-6]: tls_client.c
            tls_server.c

Log Message:
Apply patch, requested by tron in ticket #961:
external/ibm-public/postfix/dist/HISTORY                        patch
external/ibm-public/postfix/dist/RELEASE_NOTES                  patch
external/ibm-public/postfix/dist/src/global/mail_version.h      patch
external/ibm-public/postfix/dist/src/local/forward.c            patch
external/ibm-public/postfix/dist/src/tls/tls_client.c           patch
external/ibm-public/postfix/dist/src/tls/tls_server.c           patch

        Update postfix to version 2.8.16:
        - TLS Interoperability workaround: turn on SHA-2 digests by
          force. This improves interoperability with clients and servers that
          deploy SHA-2 digests without the required support for TLSv1.2-style
          digest negotiation.
        - TLS Performance workaround: the Postfix SMTP server TLS session
          cache had become ineffective because recent OpenSSL versions enable
          session tickets by default, resulting in a different ticket
          encryption key for each smtpd(8) process. The workaround turns off
          session tickets. Postfix 2.11 will enable session tickets properly.
        - TLS Interoperability workaround: Debian Exim versions before 4.80-3
          may fail to communicate with Postfix and possibly other MTAs, with
          the following Exim SMTP client error message:
          TLS error on connection to server-name [server-address]
          (gnutls_handshake):

                The Diffie-Hellman prime sent by the server is not acceptable
                (not long  enough)

          See the RELEASE_NOTES file for a Postfix SMTP server configuration
          workaround.
        - Bugfix (defect introduced: 1997): memory leak while forwarding mail
          with the local(8) delivery agent, in code that handles a cleanup(8)
          server error.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.12.2.5 -r1.1.1.12.2.6 \
    src/external/ibm-public/postfix/dist/HISTORY
cvs rdiff -u -r1.1.1.6.6.1 -r1.1.1.6.6.2 \
    src/external/ibm-public/postfix/dist/RELEASE_NOTES
cvs rdiff -u -r1.1.1.12.2.5 -r1.1.1.12.2.6 \
    src/external/ibm-public/postfix/dist/src/global/mail_version.h
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.6.1 \
    src/external/ibm-public/postfix/dist/src/local/forward.c
cvs rdiff -u -r1.4.6.1 -r1.4.6.2 \
    src/external/ibm-public/postfix/dist/src/tls/tls_client.c \
    src/external/ibm-public/postfix/dist/src/tls/tls_server.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.