Package: postfix
Version: 2.5.5-1.1
Followup-For: Bug #287795

I had the same problem on my systems.
The attached patch will solve that problem.

Since some of the certs are just symlinks to /usr/share/... I had to
dereference the links to make it work in the chroot.

TT
-- 

No trees were harmed in the sending of this message,
however, a number of electrons were inconvenienced.

--- init.d.orig 2009-06-09 16:37:58.000000000 +0000
+++ init.d      2009-06-09 16:43:45.000000000 +0000
@@ -84,6 +84,21 @@
                    fi
                fi
 
+               # if we're using CApath, we need to copy the whole directory
+               ca_path=$(postconf -h smtp_tls_CApath)
+               if [ "X$ca_path" != "X" ]; then
+                       # strip leading /
+                       ca_path="${ca_path#/}"
+                       # delete current copy
+                       [ -d ${ca_path} ] && rm -rf ${ca_path}
+                       mkdir -p ${ca_path}
+                       if [ -d /${ca_path} ]; then
+                               # copy hashes and dereference
+                               cp -L /${ca_path}/*.0 ${ca_path}/
+                               chmod -R a+rX ${ca_path}
+                       fi
+               fi
+
                # if we're using unix:passwd.byname, then we need to add 
etc/passwd.
                local_maps=$(postconf -h local_recipient_maps)
                if [ "X$local_maps" != "X${local_maps#*unix:passwd.byname}" ]; 
then

Reply via email to