On 2021-12-29 08:08:59 -0500, Scott Kitterman wrote:
> Thanks. Does it come back again?
I've upgraded to 3.6.3-4, and it did not come back.
Even after "postfix stop" and "postfix start".
> When was the postfix package originally installed on the system that
> does this?
The timestamp was the following:
-rw-r--r-- 1 root root 200061 2019-09-20 11:53:51
/var/spool/postfix/etc/ssl/certs/ca-certificates.crt
This is a bit before postfix 3.4.7-1 (released on 22 Sep 2019) got
installed. So I assume that postfix before 3.4.7-1 was copying
ca-certificates.crt into the chroot and that the above timestamp
corresponded to the last start of postfix before this version
(according to some traces I have kept, it seems that I rebooted this
machine shortly after 11:52 due to the upgrade of intel-microcode).
The postfix 3.4.7-1 changelog says:
- Stop copying smtp_tls_CAfile into chroot, not needed per postfix docs
- Also copy smtpd_tls_CApath files into chroot. Closes: #579248
This may be related (though I never used smtpd_tls_CA*). So it seems
that postfix 3.4.5-1+b1 did the copy. But I don't know when this
occurred for the first time.
--
Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
