diff options
| author | sahil <sahil@FreeBSD.org> | 2010-11-27 14:48:57 +0800 |
|---|---|---|
| committer | sahil <sahil@FreeBSD.org> | 2010-11-27 14:48:57 +0800 |
| commit | 4076731781d52c08d94b620d81cf678ac774f3e0 (patch) | |
| tree | 452192291c2fb102568c5bcd951eed90f423345d /UPDATING | |
| parent | b70c2722b9e2535cbfda0cc0227cee41068e457e (diff) | |
| download | freebsd-ports-gnome-4076731781d52c08d94b620d81cf678ac774f3e0.tar.gz freebsd-ports-gnome-4076731781d52c08d94b620d81cf678ac774f3e0.tar.zst freebsd-ports-gnome-4076731781d52c08d94b620d81cf678ac774f3e0.zip | |
Add entry about potential compatibility problems with
certificate verification after upgrading mail/postfix
and mail/postfix2[56].
Diffstat (limited to 'UPDATING')
| -rw-r--r-- | UPDATING | 16 |
1 files changed, 16 insertions, 0 deletions
@@ -5,6 +5,22 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20101127: + AFFECTS: users of mail/postfix, mail/postfix2[56] + AUTHOR: sahil@FreeBSD.org + + As of Postfix 2.7.2, 2.6.8, 2.5.11: + + Postfix no longer automatically appends the system default CA + (certificate authority) certificates, when it reads the CA + certificates specified with {smtp, lmtp, smtpd}_tls_CAfile or + with {smtp, lmtp, smtpd}_tls_CApath. This prevents third-party + certificates from getting mail relay permission with the + permit_tls_all_clientcerts feature. Unfortunately, this change + may cause compatibility problems with configurations that rely + on certificate verification for other purposes. To get the old + behavior, specify "tls_append_default_CA = yes". + 20101124: AFFECTS: users of www/py-flexget AUTHOR: lioux@FreeBSD.org |