Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 06 May 2020 15:35:57 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 246259] mail/sendmail add -D_FFR_TLS_SE_OPTS to files/site.config.m4.tls for FEATURE(`tls_session_features')
Message-ID:  <bug-246259-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D246259

            Bug ID: 246259
           Summary: mail/sendmail add -D_FFR_TLS_SE_OPTS to
                    files/site.config.m4.tls for
                    FEATURE(`tls_session_features')
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: dinoex@FreeBSD.org
          Reporter: ruben@verweg.com
             Flags: maintainer-feedback?(dinoex@FreeBSD.org)
          Assignee: dinoex@FreeBSD.org

In the rapidly evolving Let's Encrypt the world it would be great to use=20

FEATURE(`tls_session_features')

in Sendmail, so we have a higher granularity setting ssl options and ciphers
for older clients/servers using FEATURE(`access_db') while keeping base
settings strict

For that, files/site.config.m4.tls needs the following line

APPENDDEF(`conf_sendmail_ENVDEF', `-DSTARTTLS -D_FFR_TLS_EC')

To be changed into

APPENDDEF(`conf_sendmail_ENVDEF', `-DSTARTTLS -D_FFR_TLS_EC
-D_FFR_TLS_SE_OPTS')

On a fbsd 12.1 system it will result in this functionality being available

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-246259-7788>