Mailinglist Archive: opensuse-de (2429 mails)

< Previous Next >
Re: Postfix mit TLS
  • From: Michael Post <michael.post@xxxxxxxxxxxx>
  • Date: Sun, 29 Jan 2006 17:44:57 +0100
  • Message-id: <43DCF109.7080303@xxxxxxxxxxxx>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hallo Sandy,

Sandy Drobic schrieb:
> Hier ist sasl, aber kein TLS.
>
Genau das ist ja mein Problem.
>
> Damit sollte TSL eigentlich erscheinen als Option.
Habe ich mir auch gedacht, aber es passiert nichts.
>
> Hm, hier fehlt schon mal die libssl in der Liste. Prüfe bitte noch
> einmal, ob du, wie von Andreas gesagt, in deinem make -makefiles,
> das Include-Verzeichnis von ssl mit angegeben hast. Prüfe auch mal
> während des Compile-Laufes, ob überhaupt Meldungen erscheinen, dass
> TLS als Option einkompiliert wird.
Hier der make -makefiles aufruf. Den Eintrag von Andreas habe ich nun
hinter -DHAS_SSL gesetzt, nach meinem Verständnis hat der nichts in
AUXLIBS zu suchen.

psYkoMobil:/home/michael/tmp/postfix-2.2.8 # make -f Makefile.init
makefiles 'CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DHAS_PCRE
- -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl -DHAS_SSL
- -I/usr/include/ssl -DUSE_TLS' 'AUXLIBS=-L/usr/lib/ -lmysqlclient -lz
- -lm -lpcre -lsasl2 -lssl -lcrypto'
make -f Makefile.in MAKELEVEL= Makefiles
(echo "# Do not edit -- this file documents how Postfix was built for
your machine."; /bin/sh makedefs) >makedefs.tmp
set +e; if cmp makedefs.tmp conf/makedefs.out; then rm makedefs.tmp; \
else mv makedefs.tmp conf/makedefs.out; fi >/dev/null 2>/dev/null
set -e; for i in src/util src/global src/dns src/tls src/master
src/postfix src/smtpstone src/sendmail src/error src/pickup
src/cleanup src/smtpd src/local src/lmtp src/trivial-rewrite src/qmgr
src/oqmgr src/smtp src/bounce src/pipe src/showq src/postalias
src/postcat src/postconf src/postdrop src/postkick src/postlock
src/postlog src/postmap src/postqueue src/postsuper src/qmqpd
src/spawn src/flush src/verify src/virtual src/proxymap src/anvil
src/scache src/discard src/tlsmgr; do \
(set -e; echo "[$i]"; cd $i; rm -f Makefile; \
make -f Makefile.in Makefile MAKELEVEL=) || exit 1; \
done;
[src/util]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/global]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/dns]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/tls]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/master]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postfix]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/smtpstone]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/sendmail]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/error]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/pickup]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/cleanup]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/smtpd]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/local]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/lmtp]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/trivial-rewrite]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/qmgr]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/oqmgr]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/smtp]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/bounce]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/pipe]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/showq]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postalias]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postcat]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postconf]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postdrop]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postkick]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postlock]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postlog]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postmap]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postqueue]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/postsuper]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/qmqpd]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/spawn]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/flush]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/verify]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/virtual]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/proxymap]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/anvil]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/scache]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/discard]
(cat ../../conf/makedefs.out Makefile.in) >Makefile
[src/tlsmgr]
(set -e; echo "# DO NOT EDIT"; /bin/sh ../../makedefs && cat
Makefile.in) >Makefile
rm -f Makefile; (cat conf/makedefs.out Makefile.in) >Makefile



Hier die Teil-Ausgabe von make

psYkoMobil:/home/michael/tmp/postfix-2.2.8 # make > make.log
ar: creating libutil.a
ar: creating libglobal.a
ar: creating libdns.a
ar: creating libtls.a
ar: creating libmaster.a


Und hier die Ausgabe von

psYkoMobil:/home/michael/tmp/postfix-2.2.8 # cat make.log | grep tls
set -e; for i in src/util src/global src/dns src/tls src/master
src/postfix src/smtpstone src/sendmail src/error src/pickup
src/cleanup src/smtpd src/local src/lmtp src/trivial-rewrite src/qmgr
src/oqmgr src/smtp src/bounce src/pipe src/showq src/postalias
src/postcat src/postconf src/postdrop src/postkick src/postlock
src/postlog src/postmap src/postqueue src/postsuper src/qmqpd
src/spawn src/flush src/verify src/virtual src/proxymap src/anvil
src/scache src/discard src/tlsmgr; do \
[src/tls]
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_prng_dev.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_prng_egd.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_prng_file.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_prng_exch.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_stream.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_bio_ops.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_misc.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_dh.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_rsa.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_verify.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_certkey.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_session.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_temp.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_client.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_server.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_scache.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_mgr.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tls_seed.c
ar rv libtls.a tls_prng_dev.o tls_prng_egd.o tls_prng_file.o
tls_prng_exch.o tls_stream.o tls_bio_ops.o tls_misc.o tls_dh.o
tls_rsa.o tls_verify.o tls_certkey.o tls_session.o tls_temp.o
tls_client.o tls_server.o tls_scache.o tls_mgr.o tls_seed.o
a - tls_prng_dev.o
a - tls_prng_egd.o
a - tls_prng_file.o
a - tls_prng_exch.o
a - tls_stream.o
a - tls_bio_ops.o
a - tls_misc.o
a - tls_dh.o
a - tls_rsa.o
a - tls_verify.o
a - tls_certkey.o
a - tls_session.o
a - tls_temp.o
a - tls_client.o
a - tls_server.o
a - tls_scache.o
a - tls_mgr.o
a - tls_seed.o
ranlib libtls.a
cp libtls.a ../../lib
ranlib ../../lib/libtls.a
for i in tls.h tls_prng.h tls_scache.h tls_mgr.h; \
cd ../../include; chmod 644 tls.h tls_prng.h tls_scache.h tls_mgr.h
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -o smtpd smtpd.o smtpd_token.o smtpd_check.o smtpd_chat.o
smtpd_state.o smtpd_peer.o smtpd_sasl_proto.o smtpd_sasl_glue.o
smtpd_proxy.o smtpd_xforward.o ../../lib/libmaster.a
../../lib/libtls.a ../../lib/libdns.a ../../lib/libglobal.a
../../lib/libutil.a -L/usr/lib/ -lmysqlclient -lz -lm -lpcre -lsasl2
- -lssl -lcrypto -ldb -lnsl -lresolv
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -o smtp smtp.o smtp_connect.o smtp_proto.o smtp_chat.o
smtp_session.o smtp_addr.o smtp_trouble.o smtp_state.o smtp_rcpt.o
smtp_sasl_proto.o smtp_sasl_glue.o smtp_reuse.o smtp_map11.o
../../lib/libmaster.a ../../lib/libtls.a ../../lib/libdns.a
../../lib/libglobal.a ../../lib/libutil.a -L/usr/lib/ -lmysqlclient
- -lz -lm -lpcre -lsasl2 -lssl -lcrypto -ldb -lnsl -lresolv
[src/tlsmgr]
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -c tlsmgr.c
gcc -Wmissing-prototypes -Wformat -DHAS_MYSQL -I/usr/include/mysql
- -DHAS_PCRE -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl
- -DHAS_SSL -I/usr/include/ssl -DUSE_TLS -g -O -I. -I../../include
- -DLINUX2 -o tlsmgr tlsmgr.o ../../lib/libmaster.a ../../lib/libtls.a
../../lib/libglobal.a ../../lib/libutil.a -L/usr/lib/ -lmysqlclient
- -lz -lm -lpcre -lsasl2 -lssl -lcrypto -ldb -lnsl -lresolv
cp tlsmgr ../../libexec


Nachtrag: Das hat sich wohl jetzt alles erledigt. Schau bitte mal in
den Thread von Andreas. Dort gibt es einen ganz anderen Stand.
TLS war wohl nicht durch 'make update' eingetragen worden und daher
nicht in Erwägung gezogen.
TLS scheint jetzt drin zu sein, allerdings ohne Eintrag in der
Auflistung bei telnet localhost 25.

STARTTLS gibt jetzt wenigstens eine Antwort - wenn auch eine
Fehlermeldung.

Vielen Dank für die bisherige Hilfe

Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD3PEINhM2b4kmzXwRAqT7AJ4jXjuGQfR3uqZP+3YnTZhc2E9qTwCdE16c
n9XJDgssd604epbzreczBkE=
=uISn
-----END PGP SIGNATURE-----


< Previous Next >