Re: PR/48566 CVS commit: pkgsrc/mail/sendmail

[jnemeth%CornerstoneService.ca@localhost (John Nemeth)]

On Jun 20,  8:14am, Emmanuel Dreyfus wrote:
} Subject: Re: PR/48566 CVS commit: pkgsrc/mail/sendmail
} John Nemeth <jnemeth%netbsd.org@localhost> wrote:
} 
} > Update to sendmail 8.14.9nb1: this is a pkgsrc bugfix update
} 
} The build fails if you have OpenSSL >= 1.0.1g (which means it breaks on 
latests NetBSD releases):
} 
} cc -O -I. -I../../include -DNEWDB -DNIS -DMAP_REGEX -DSOCKETMAP -DLDAPMAP 
-D_FFR_LDAP_NETWORK_TIMEOUT -I/usr/pkg/include 
-DSMRSH_CMDDIR=\"/usr/pkg/libexec/sm.bin\"
} -DNETINET6 -DNEEDSGETIPNODE -DTCPWRAPPERS -DSASL=2 
-D_FFR_USE_GETPWNAM_ERRNO=1 -DMILTER -DSTARTTLS -D_FFR_TLS_1 -D_FFR_TLS_EC  
-DLDAP_DEPRECATED -I/usr/pkg/include
} -I/usr/include -c readcf.c
} readcf.c:2424:2: error: expected '}' before '{' token
} readcf.c:2425:2: error: expected '}' before ';' token
} 
} There is a line with }, missing:
} 
} #ifdef SSL_OP_CRYPTOPRO_TLSEXT_BUG
}         { "SSL_OP_CRYPTOPRO_TLSEXT_BUG",        SSL_OP_CRYPTOPRO_TLSEXT_BUG
} },
} #endif
} #ifdef SSL_OP_TLSEXT_PADDING
}         { "SSL_OP_TLSEXT_PADDING",      SSL_OP_TLSEXT_PADDING
} #endif
}         { NULL,         0               }
} };

     Argh!  I am building with OpenSSL 1.0.1g, but apparently not new
enough.  I will start my buildbox buidling a newer -current.

} >  The above should address the folling PRs:
} (...)  
} >  - PR/48566 - Emmanuel Dreyfus -- problem with TLS timeouts
} 
} It still times out but I tracked it down to this setup:
} 
} It hangs at RCPT stage when sendmail is built with the sasl
} option (even if no SASL option is configured in sendmail.cf) and a
} milter is configured in sendmail.cf
} 
} I can enable and configure everything else (ldap, tls,
} sendmail-ffr-tls) except sasl, and use a milter, it works. 
} 
} I can enable and configure sasl and disable the milter, it works too.

     This is truely weird.  For now, I disable NAMED_RESN when
using the sasl option.  I want to stop the churn during the freeze.
But, I still wish to have the NAMED_RESN option to get it tested.
I'm using it in production, and I've had a positive report from
somebody else.

     I have placed a new package at
ftp.netbsd.org:/pub/NetBSD/misc/jnemeth/sendmail.pkgsrc.tgz.  Could
you try that, please?

}-- End of excerpt from Emmanuel Dreyfus