Re: PR/48566 CVS commit: pkgsrc/mail/sendmail

[jnemeth%CornerstoneService.ca@localhost (John Nemeth)]

The following reply was made to PR pkg/48566; it has been noted by GNATS.

From: jnemeth%CornerstoneService.ca@localhost (John Nemeth)
To: manu%netbsd.org@localhost (Emmanuel Dreyfus), 
gnats-bugs%netbsd.org@localhost,
        gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost
Cc: 
Subject: Re: PR/48566 CVS commit: pkgsrc/mail/sendmail
Date: Fri, 20 Jun 2014 02:16:43 -0700

 On Jun 20,  8:14am, Emmanuel Dreyfus wrote:
 } Subject: Re: PR/48566 CVS commit: pkgsrc/mail/sendmail
 } John Nemeth <jnemeth%netbsd.org@localhost> wrote:
 } 
 } > Update to sendmail 8.14.9nb1: this is a pkgsrc bugfix update
 } 
 } The build fails if you have OpenSSL >= 1.0.1g (which means it breaks on 
latests NetBSD releases):
 } 
 } cc -O -I. -I../../include -DNEWDB -DNIS -DMAP_REGEX -DSOCKETMAP -DLDAPMAP 
-D_FFR_LDAP_NETWORK_TIMEOUT -I/usr/pkg/include 
-DSMRSH_CMDDIR=\"/usr/pkg/libexec/sm.bin\"
 } -DNETINET6 -DNEEDSGETIPNODE -DTCPWRAPPERS -DSASL=2 
-D_FFR_USE_GETPWNAM_ERRNO=1 -DMILTER -DSTARTTLS -D_FFR_TLS_1 -D_FFR_TLS_EC  
-DLDAP_DEPRECATED -I/usr/pkg/include
 } -I/usr/include -c readcf.c
 } readcf.c:2424:2: error: expected '}' before '{' token
 } readcf.c:2425:2: error: expected '}' before ';' token
 } 
 } There is a line with }, missing:
 } 
 } #ifdef SSL_OP_CRYPTOPRO_TLSEXT_BUG
 }         { "SSL_OP_CRYPTOPRO_TLSEXT_BUG",        SSL_OP_CRYPTOPRO_TLSEXT_BUG
 } },
 } #endif
 } #ifdef SSL_OP_TLSEXT_PADDING
 }         { "SSL_OP_TLSEXT_PADDING",      SSL_OP_TLSEXT_PADDING
 } #endif
 }         { NULL,         0               }
 } };
 
      Argh!  I am building with OpenSSL 1.0.1g, but apparently not new
 enough.  I will start my buildbox buidling a newer -current.
 
 } >  The above should address the folling PRs:
 } (...)  
 } >  - PR/48566 - Emmanuel Dreyfus -- problem with TLS timeouts
 } 
 } It still times out but I tracked it down to this setup:
 } 
 } It hangs at RCPT stage when sendmail is built with the sasl
 } option (even if no SASL option is configured in sendmail.cf) and a
 } milter is configured in sendmail.cf
 } 
 } I can enable and configure everything else (ldap, tls,
 } sendmail-ffr-tls) except sasl, and use a milter, it works. 
 } 
 } I can enable and configure sasl and disable the milter, it works too.
 
      This is truely weird.  For now, I disable NAMED_RESN when
 using the sasl option.  I want to stop the churn during the freeze.
 But, I still wish to have the NAMED_RESN option to get it tested.
 I'm using it in production, and I've had a positive report from
 somebody else.
 
      I have placed a new package at
 ftp.netbsd.org:/pub/NetBSD/misc/jnemeth/sendmail.pkgsrc.tgz.  Could
 you try that, please?
 
 }-- End of excerpt from Emmanuel Dreyfus