Re: pkg/48566 (getpwnam() fix and ECDH for sendmail from upstream)

[Emmanuel Dreyfus <manu%netbsd.org@localhost>]

The following reply was made to PR pkg/48566; it has been noted by GNATS.

From: Emmanuel Dreyfus <manu%netbsd.org@localhost>
To: John Nemeth <jnemeth%CornerstoneService.ca@localhost>
Cc: Emmanuel Dreyfus <manu%netbsd.org@localhost>, 
gnats-bugs%netbsd.org@localhost,
        gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost
Subject: Re: pkg/48566 (getpwnam() fix and ECDH for sendmail from upstream)
Date: Thu, 19 Jun 2014 07:29:21 +0000

 On Wed, Jun 18, 2014 at 10:06:55PM -0700, John Nemeth wrote:
 >      The case where res_ninit() was called without checking for
 > previous initialisation was relatively early in the startup.  A
 > visual code inspection indicated that it was highly unlikely that
 > res_ninit() would be called after initialisation.  Did you find a
 > code path where it could happen? 
 
 No, but sendmail is completely broken at mine (timeouts in all TLS sessions)
 and this is caused by this patchset, as it works fine if I undef NAMED_RESN.
 Hence I am looking for possible explanations. 
 
 Unfortunately it is not one of these two problems, as I still get the
 tiemout problem with your updated patchset. There must be other bugs.
 
 While there, even with NAMED_RESN there is are still many sites sendmail
 cannot connect to because of SSL_OP_TLSEXT_PADDING introduced in 
 OpenSSL 1.0.1g. Since that cause troubles on latest NetBSD releases, we
 need to add that patch which was accepted upstream by sendmail maintainers:
 ftp://ftp.espci.fr/shadow/manu/patch-sendmail_readcf.c
 
 >      BTW, where were you when I asked for testing and feedback
 > prior to 8.14.9 being committed?
 
 Busy on something else, I am sure you can understand that.
 
 -- 
 Emmanuel Dreyfus
 manu%netbsd.org@localhost