diff options
author | Nick Hadaway <raker@gentoo.org> | 2003-02-01 08:04:04 +0000 |
---|---|---|
committer | Nick Hadaway <raker@gentoo.org> | 2003-02-01 08:04:04 +0000 |
commit | 04b181ffd15f89569b241018cebbaf8cac32a029 (patch) | |
tree | db0ba55aedd95497c160691e14fd274f0a45abae /net-mail/qmail/files | |
parent | New ebuild. For some reason -r9 was marked stable... (diff) | |
download | gentoo-2-04b181ffd15f89569b241018cebbaf8cac32a029.tar.gz gentoo-2-04b181ffd15f89569b241018cebbaf8cac32a029.tar.bz2 gentoo-2-04b181ffd15f89569b241018cebbaf8cac32a029.zip |
new ebuild. many changes!
Diffstat (limited to 'net-mail/qmail/files')
-rw-r--r-- | net-mail/qmail/files/1.03-r10/99qmail | 2 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/defaultdelivery | 2 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/dot_qmail | 1 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/qmail-control | 30 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/rc | 4 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/run-qmailsend | 2 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/run-qmailsendlog | 2 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/run-qmailsmtpd | 6 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/run-qmailsmtpdlog | 2 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/tls-patch.txt | 105 | ||||
-rw-r--r-- | net-mail/qmail/files/1.03-r10/tls.patch.bz2 | bin | 0 -> 10458 bytes | |||
-rw-r--r-- | net-mail/qmail/files/digest-qmail-1.03-r10 | 5 |
12 files changed, 161 insertions, 0 deletions
diff --git a/net-mail/qmail/files/1.03-r10/99qmail b/net-mail/qmail/files/1.03-r10/99qmail new file mode 100644 index 000000000000..d17f5d7dbee9 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/99qmail @@ -0,0 +1,2 @@ +PATH=/var/qmail/bin +ROOTPATH=/var/qmail/bin diff --git a/net-mail/qmail/files/1.03-r10/defaultdelivery b/net-mail/qmail/files/1.03-r10/defaultdelivery new file mode 100644 index 000000000000..d0ef7de8b590 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/defaultdelivery @@ -0,0 +1,2 @@ +|dot-forward .forward +./.maildir/ diff --git a/net-mail/qmail/files/1.03-r10/dot_qmail b/net-mail/qmail/files/1.03-r10/dot_qmail new file mode 100644 index 000000000000..7c9e5d08f067 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/dot_qmail @@ -0,0 +1 @@ +./.maildir/ diff --git a/net-mail/qmail/files/1.03-r10/qmail-control b/net-mail/qmail/files/1.03-r10/qmail-control new file mode 100644 index 000000000000..31581b6c8315 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/qmail-control @@ -0,0 +1,30 @@ +#!/sbin/runscript +# Copyright 1999-2002 Gentoo Technologies, Inc. +# Distributed under the terms of the GNU General Public License, v2 or later +# $Header: /var/cvsroot/gentoo-x86/net-mail/qmail/files/1.03-r10/qmail-control,v 1.1 2003/02/01 08:04:04 raker Exp $ + +opts="start stop restart reload" + +start() { + ebegin "Starting qmail mta ..." + svc -u /var/qmail/supervise/* + eend $? + ebegin "Starting qmail mta logging ..." + svc -u /var/qmail/supervise/*/log + eend $? +} + +stop() { + ebegin "Stopping qmail mta ..." + svc -d /var/qmail/supervise/* + eend $? + ebegin "Stopping qmail mta logging ..." + svc -d /var/qmail/supervise/*/log + eend $? +} + +reload() { + ebegin "Reloading 'locals' and 'virtualdomains' control files." + svc -h /var/qmail/supervise/qmail-send + eend $? +} diff --git a/net-mail/qmail/files/1.03-r10/rc b/net-mail/qmail/files/1.03-r10/rc new file mode 100644 index 000000000000..a7bbdc986766 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/rc @@ -0,0 +1,4 @@ +#!/bin/sh + +exec env - PATH="/var/qmail/bin:$PATH" \ + qmail-start "`cat /var/qmail/control/defaultdelivery`" diff --git a/net-mail/qmail/files/1.03-r10/run-qmailsend b/net-mail/qmail/files/1.03-r10/run-qmailsend new file mode 100644 index 000000000000..8dbd3adf524f --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/run-qmailsend @@ -0,0 +1,2 @@ +#!/bin/sh +exec /var/qmail/rc diff --git a/net-mail/qmail/files/1.03-r10/run-qmailsendlog b/net-mail/qmail/files/1.03-r10/run-qmailsendlog new file mode 100644 index 000000000000..5ff50d1e7711 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/run-qmailsendlog @@ -0,0 +1,2 @@ +#!/bin/sh +exec /usr/bin/setuidgid qmaill /usr/bin/multilog t s2500000 /var/log/qmail/qmail-send diff --git a/net-mail/qmail/files/1.03-r10/run-qmailsmtpd b/net-mail/qmail/files/1.03-r10/run-qmailsmtpd new file mode 100644 index 000000000000..9733e11e154a --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/run-qmailsmtpd @@ -0,0 +1,6 @@ +#!/bin/sh +QMAILDUID=`id -u qmaild` +NOFILESGID=`id -g qmaild` +exec /usr/bin/softlimit -m 8000000 \ + /usr/bin/tcpserver -H -R -v -p -x /etc/tcp.smtp.cdb \ + -u $QMAILDUID -g $NOFILESGID 0 smtp rblsmtpd /var/qmail/bin/qmail-smtpd 2>&1 diff --git a/net-mail/qmail/files/1.03-r10/run-qmailsmtpdlog b/net-mail/qmail/files/1.03-r10/run-qmailsmtpdlog new file mode 100644 index 000000000000..2d9546146583 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/run-qmailsmtpdlog @@ -0,0 +1,2 @@ +#!/bin/sh +exec /usr/bin/setuidgid qmaill /usr/bin/multilog t s2500000 /var/log/qmail/qmail-smtpd diff --git a/net-mail/qmail/files/1.03-r10/tls-patch.txt b/net-mail/qmail/files/1.03-r10/tls-patch.txt new file mode 100644 index 000000000000..62d11e8d295f --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/tls-patch.txt @@ -0,0 +1,105 @@ +Frederik Vermeulen <qmail-tls akrul inoa.net> 20021228 +http://inoa.net/qmail/qmail-1.03-tls.patch + +This patch implements RFC2487 in qmail. This means you can +get SSL or TLS encrypted and authenticated SMTP between +the MTAs and from MUA to MTA. +The code is considered experimental (but has worked for +many since its first release on 1999-03-21). + +Usage: - install OpenSSL-0.9.6g http://www.openssl.org/ + (any 0.9.6 version is presumed to work) + - apply patch to qmail-1.03 http://www.qmail.org/ + The patches to qmail-remote.c + and qmail-smtpd.c can be applied separately. + - provide a server certificate in /var/qmail/control/servercert.pem. + "make cert" makes a self-signed certificate. + "make cert-req" makes a certificate request. + Note: you can add the CA certificate and intermediate + certs to the end of servercert.pem. + - replace qmail-smtpd and/or qmail-remote binary + - verify operation (header information should show + something like + "Received [..] with DES-CBC3-SHA encrypted SMTP;") + If you don't have a server to test with, you can test + by sending mail to tag-ping@tbs-internet.com, + which will bounce your mail. + +Optional: - when DEBUG is defined, some extra TLS info will be logged + - qmail-remote will authenticate with the certificate in + /var/qmail/control/clientcert.pem. By preference this is + the same as servercert.pem, where nsCertType should be + == server,client or be a generic certificate (no usage specified). + - when a 512 RSA key is provided in /var/qmail/control/rsa512.pem, + this key will be used instead of on-the-fly generation by + qmail-smtpd. Periodical replacement can be done by crontab: + 01 01 * * * umask 0077; /usr/local/ssl/bin/openssl genrsa \ + -out /var/qmail/control/rsa512.new 512 > /dev/null 2>&1 &&\ + chown qmaild.qmail /var/qmail/control/rsa512.new && /bin/mv -f \ + /var/qmail/control/rsa512.new /var/qmail/control/rsa512.pem + - server authentication: + qmail-remote requires authentication from servers for which + /var/qmail/control/tlshosts/host.dom.ain.pem exists. + The .pem file contains the validating CA certificates + (or self-signed server certificate). + CommonName has to match. + WARNING: this option may cause mail to be delayed, bounced, + doublebounced, and lost. + - client authentication: + when relay rules would reject an incoming mail, + qmail-smtpd can allow the mail based on a presented cert. + Certs are verified against a CA list in + /var/qmail/control/clientca.pem (eg. http://www.modssl.org/ + source/cvs/exp/mod_ssl/pkg.mod_ssl/pkg.sslcfg/ca-bundle.crt) + and the cert email-address has to match a line in + /var/qmail/control/tlsclients. This email-address is logged + in the headers. + - cipher selection: + qmail-remote: + openssl cipher string (`man ciphers`) read from + /var/qmail/control/tlsclientciphers + qmail-smtpd: + openssl cipher string read from TLSCIPHERS environment variable + (can vary based on client IP address e.g.) + or if that is not available /var/qmail/control/tlsserverciphers + - smtps (deprecated SMTP over TLS via port 465): + qmail-remote: when connecting to port 465 + qmail-smtpd: when SMTPS environment variable is not empty + +Caveats: - do a `make clean` after patching + - binaries dynamically linked with current openssl versions need + recompilation when the shared openssl libs are upgraded. + - this patch could conflict with other patches (notably those + replacing \n with \r\n, which is a bad idea on encrypted links). + - some broken servers have a problem with TLSv1 compatibility. + Uncomment the line where we set the SSL_OP_NO_TLSv1 option. + - needs working /dev/urandom (or EGD for openssl versions >0.9.7) + for seeding random number generator. + - packagers should make sure that installing without a valid + servercert is impossible + - when applied in combination with AUTH patch, AUTH patch + should be applied first and first part of this patch + will fail. This error can be ignored. Packagers should + cut the first 12 lines of this patch to make a happy + patch + +Copyright: GPL + Links with OpenSSL + Inspiration and code from examples in SSLeay (E. Young + <eay@cryptsoft.com> and T. Hudson <tjh@cryptsoft.com>), + stunnel (M. Trojnara <mtrojnar@ddc.daewoo.com.pl>), + Postfix/TLS (L. Jaenicke <Lutz.Jaenicke@aet.tu-cottbus.de>), + modssl (R. Engelschall <rse@engelschall.com>), + openssl examples of E. Rescorla <ekr@rtfm.com>. + Debug code, tlscipher selection, many feature suggestions, + French docs https://www.TBS-internet.com/ssl/qmail-tls.html + from Jean-Philippe Donnio <tag-ssl@tbs-internet.com>. + Openssl usage consulting from B. M"oller <bmoeller@acm.org>. + Bug report from A. Dustman <adustman@comstar.net>. + Ssl_timeoutio functions (non-blocking io, timeouts), smtps, + auth, qmtp, mxps patch compatibility, man pages, code cleanup, + improved error reporting, RFC2595 server identity check + from A. Meltzer <albertikm (a) hotmail.com>. + Bug report from Niall Richard Murphy, Tim Helton. + +Bug reports: mailto:<jos-tls@kotnet.org> diff --git a/net-mail/qmail/files/1.03-r10/tls.patch.bz2 b/net-mail/qmail/files/1.03-r10/tls.patch.bz2 Binary files differnew file mode 100644 index 000000000000..ee9d912da088 --- /dev/null +++ b/net-mail/qmail/files/1.03-r10/tls.patch.bz2 diff --git a/net-mail/qmail/files/digest-qmail-1.03-r10 b/net-mail/qmail/files/digest-qmail-1.03-r10 new file mode 100644 index 000000000000..6ad5ffb471dd --- /dev/null +++ b/net-mail/qmail/files/digest-qmail-1.03-r10 @@ -0,0 +1,5 @@ +MD5 622f65f982e380dbe86e6574f3abcb7c qmail-1.03.tar.gz 220668 +MD5 6b202f71a99fb41e9e32906017270ba0 qmail-smtpd-auth-0.31.tar.gz 8798 +MD5 1d5b0aafb651ce2ad02aac6af80758c0 qmail-link-sync.patch 1403 +MD5 99070bb55cac5ad61f8fb203422e651e ext_todo-20030105.patch 33763 +MD5 2ff58c3570870a8ff9a1d9eb9aec05a6 big-concurrency.patch 9331 |