mailcow-dockerized icon indicating copy to clipboard operation
mailcow-dockerized copied to clipboard

Add support for new TLS protocol settings syntax in Postfix

Open WhaleHub opened this issue 4 years ago • 12 comments

Is your feature request related to a problem? Please describe. The way Postfix defines a list of supported protocol versions in its settings in the current stable version (3.5) is via an exhaustive list of exclusions that looks like this:

smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1

The current experimental version of Postfix (3.6) adds a new, simpler syntax which allows users to specify the bounds like this:

smtp_tls_mandatory_protocols = >=TLSv1.2

Describe the solution you'd like The Postfix settings file used by mailcow (main.cf) should be updated to use the new syntax once the Postfix Docker image starts being built with Postfix 3.6 or later.

Additional context Postfix 3.6 has not been released as stable yet and likely won't be included in Debian until Debian 11 at the earliest, so this issue is only meant to keep track of a change that should be made once the requirements for it have been met later down the road.

WhaleHub avatar Oct 06 '20 21:10 WhaleHub

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Dec 19 '20 07:12 stale[bot]

Postfix 3.6 has finally been released as stable: http://www.postfix.org/announcements/postfix-3.6.0.html

ghost avatar May 15 '21 01:05 ghost

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

github-actions[bot] avatar Jul 15 '21 00:07 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

github-actions[bot] avatar Sep 13 '21 13:09 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Nov 13 '21 00:11 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Jan 12 '22 12:01 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Mar 14 '22 08:03 milkmaker

Postfix 3.6+ will ship with Debian 12 (codename "bookworm"): https://packages.debian.org/bookworm/postfix

ghost avatar Mar 15 '22 04:03 ghost

Which will be released in 1 year, then I would rather build from source...

MAGICCC avatar Mar 17 '22 19:03 MAGICCC

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar May 17 '22 00:05 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Jul 17 '22 00:07 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Sep 15 '22 05:09 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Nov 14 '22 13:11 milkmaker

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Jan 13 '23 17:01 milkmaker

This would be pretty neat if not added yet. @DerLinkman

VermiumSifell avatar Jan 20 '23 12:01 VermiumSifell

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

milkmaker avatar Mar 21 '23 12:03 milkmaker

We'll change that when Bookworm is released and we change the os basics.

DerLinkman avatar Mar 21 '23 13:03 DerLinkman

@DerLinkman Debian 12 was released on Saturday.

ghost avatar Jun 12 '23 06:06 ghost

That's correct...

DerLinkman avatar Jun 12 '23 06:06 DerLinkman