[Bug 1225397] New: postfix gives warnings about deprecated parameters
https://bugzilla.suse.com/show_bug.cgi?id=1225397 Bug ID: 1225397 Summary: postfix gives warnings about deprecated parameters Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs@suse.de Reporter: freek@opensuse.org QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- postfix gives warnings about deprecated parameters May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtp_enforce_tls" will be removed; instead, specify "smtp_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtpd_enforce_tls" will be removed; instead, specify "smtpd_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtp_use_tls" will be removed; instead, specify "smtp_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtpd_use_tls" will be removed; instead, specify "smtpd_tls_security_level" These parameters are introduced in /sbin/config.postfix The attached patch file removes this introduction, the replacements are already present in config.postfix. Also a bug in the naming of backups in /var/adm/backups/postfix is addressed. In principle "$POSTFIX_SMTP_TLS_CLIENT" == "must" should not be expanded in $PCONF -e "smtp_tls_security_level = encrypt". This is a global definition. It should be expanded in smtp_tls_policy_maps = lmdb:/etc/postfix/tls_policy and only for specific destinations in /etc/postfix/tls_policy. So the possibility "must" should be accompanied by specific destinations. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c1 --- Comment #1 from Freek de Kruijf <freek@opensuse.org> --- Created attachment 875136 --> https://bugzilla.suse.com/attachment.cgi?id=875136&action=edit Patch file for config.postfix -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c2 --- Comment #2 from Freek de Kruijf <freek@opensuse.org> --- (In reply to Freek de Kruijf from comment #0)
postfix gives warnings about deprecated parameters In principle "$POSTFIX_SMTP_TLS_CLIENT" == "must" should not be expanded in $PCONF -e "smtp_tls_security_level = encrypt". This is a global definition. It should be expanded in smtp_tls_policy_maps = lmdb:/etc/postfix/tls_policy and only for specific destinations in /etc/postfix/tls_policy. So the possibility "must" should be accompanied by specific destinations.
Setting this parameter to this value also results in amavis not able to deliver messages back to postfix. Only after resetting the value to "may" gets these messages again processed by postfix. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c3 --- Comment #3 from Freek de Kruijf <freek@opensuse.org> --- (In reply to Freek de Kruijf from comment #2)
(In reply to Freek de Kruijf from comment #0)
postfix gives warnings about deprecated parameters In principle "$POSTFIX_SMTP_TLS_CLIENT" == "must" should not be expanded in $PCONF -e "smtp_tls_security_level = encrypt". This is a global definition. It should be expanded in smtp_tls_policy_maps = lmdb:/etc/postfix/tls_policy and only for specific destinations in /etc/postfix/tls_policy. So the possibility "must" should be accompanied by specific destinations.
Setting this parameter to this value also results in amavis not able to deliver messages back to postfix. Only after resetting the value to "may" gets these messages again processed by postfix.
It is the reverse, postfix can't deliver the message to amavis, because it requires amavis to present STARTTLS. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c4 --- Comment #4 from Freek de Kruijf <freek@opensuse.org> --- Is there any reason not to apply this patch? -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c6 --- Comment #6 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1225397) was mentioned in https://build.opensuse.org/request/show/1190925 Factory / postfix -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1225397 https://bugzilla.suse.com/show_bug.cgi?id=1225397#c7 --- Comment #7 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1225397) was mentioned in https://build.opensuse.org/request/show/1190939 Factory / postfix -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com