mailcow-dockerized
mailcow-dockerized copied to clipboard
Add support for new TLS protocol settings syntax in Postfix
Is your feature request related to a problem? Please describe. The way Postfix defines a list of supported protocol versions in its settings in the current stable version (3.5) is via an exhaustive list of exclusions that looks like this:
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
The current experimental version of Postfix (3.6) adds a new, simpler syntax which allows users to specify the bounds like this:
smtp_tls_mandatory_protocols = >=TLSv1.2
Describe the solution you'd like
The Postfix settings file used by mailcow (main.cf
) should be updated to use the new syntax once the Postfix Docker image starts being built with Postfix 3.6 or later.
Additional context Postfix 3.6 has not been released as stable yet and likely won't be included in Debian until Debian 11 at the earliest, so this issue is only meant to keep track of a change that should be made once the requirements for it have been met later down the road.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Postfix 3.6 has finally been released as stable: http://www.postfix.org/announcements/postfix-3.6.0.html
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
Postfix 3.6+ will ship with Debian 12 (codename "bookworm"): https://packages.debian.org/bookworm/postfix
Which will be released in 1 year, then I would rather build from source...
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
This would be pretty neat if not added yet. @DerLinkman
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
We'll change that when Bookworm is released and we change the os basics.
@DerLinkman Debian 12 was released on Saturday.
That's correct...