Your message dated Thu, 14 Mar 2013 14:48:24 +0000
with message-id <e1ug9sc-0004ru...@franck.debian.org>
and subject line Bug#702374: fixed in postfix 2.10.0-2
has caused the Debian Bug report #702374,
regarding new upstream version broke relay_clientcerts
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
702374: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702374
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: postfix
Version: 2.10.0-1
Severity: important

I use TLS keys to authenticate and allow relaying of mail
from trusted clients, using relay_clientcerts. 

Upgrading broke it:

Mar  9 10:23:26 wren postfix/smtpd[14341]: connect from 
dialup-4.154.6.204.Dial1.Atlanta1.Level3.net[4.154.6.204]
Mar  9 10:23:29 wren postfix/smtpd[14341]: Trusted TLS connection established 
from dialup-4.154.6.204.dial1.atlanta1.level3.net[4.154.6.204]: TLSv1.2 with 
cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Mar  9 10:23:31 wren postfix/smtpd[14341]: NOQUEUE: reject: RCPT from 
dialup-4.154.6.204.Dial1.Atlanta1.Level3.net[4.154.6.204]: 554 5.7.1 
<jo...@debian.org>: Relay access denied; from=<j...@gnu.kitenet.net> 
to=<jo...@debian.org> proto=ESMTP helo=<gnu.kitenet.net>
Mar  9 10:23:32 wren postfix/smtpd[14341]: disconnect from 
dialup-4.154.6.204.Dial1.Atlanta1.Level3.net[4.154.6.204]

I downgraded back to 2.9.3-2.1 and relaying once again works.

Relevant parts of my config:

relay_clientcerts = hash:/etc/postfix/relay_clientcerts

Which contains:

37:F6:75:70:7A:CB:A7:91:8B:2A:39:4E:24:4E:9B:F9 gnu

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: postfix
Source-Version: 2.10.0-2

We believe that the bug you reported is fixed in the latest version of
postfix, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 702...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
LaMont Jones <lam...@debian.org> (supplier of updated postfix package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 14 Mar 2013 08:15:51 -0600
Source: postfix
Binary: postfix postfix-ldap postfix-cdb postfix-pcre postfix-mysql 
postfix-pgsql postfix-dev postfix-doc
Architecture: all amd64 source
Version: 2.10.0-2
Distribution: unstable
Urgency: low
Maintainer: LaMont Jones <lam...@debian.org>
Changed-By: LaMont Jones <lam...@debian.org>
Closes: 702374
Description: 
 postfix-cdb - CDB map support for Postfix
 postfix-dev - Loadable modules development environment for Postfix
 postfix-doc - Documentation for Postfix
 postfix    - High-performance mail transport agent
 postfix-ldap - LDAP map support for Postfix
 postfix-mysql - MySQL map support for Postfix
 postfix-pcre - PCRE map support for Postfix
 postfix-pgsql - PostgreSQL map support for Postfix
Changes: 
 postfix (2.10.0-2) unstable; urgency=low
 .
   * Correctly set smtpd_relay_restrictions on upgrade to 2.10.0.
     Closes: #702374
Checksums-Sha1: 
 8b6e7b9eacd5731653285026c2d231d00197fd95 1737 postfix_2.10.0-2.dsc
 dd9bfc7afee416aa9f2368d084a4b202718e42df 3826655 postfix_2.10.0.orig.tar.gz
 8745edc99a687a190345ddfbb23f963d8932e710 248570 postfix_2.10.0-2.diff.gz
 15da05b4655773dbfeeff627a27799703a231d58 1612210 postfix_2.10.0-2_amd64.deb
 5ca5d2e94965deec70e34606e6bd955076972d4c 268886 postfix-ldap_2.10.0-2_amd64.deb
 2bae6da3231ceead13c393de6d74aa847d76679b 260000 postfix-cdb_2.10.0-2_amd64.deb
 39e557da021406d6b61101499897c09d5a482dea 262004 postfix-pcre_2.10.0-2_amd64.deb
 15746ddf241bb6db4d433b8bc02c57148edb88c6 261960 
postfix-mysql_2.10.0-2_amd64.deb
 3b2b465b744c7607364c38a0ff2e10e61fbf7677 262122 
postfix-pgsql_2.10.0-2_amd64.deb
 1c3a075e88ab940deede42e606d660f06b9bec9a 372758 postfix-dev_2.10.0-2_all.deb
 49e2c560081155e5e6ebe9b292c25f15d535188a 1302712 postfix-doc_2.10.0-2_all.deb
Checksums-Sha256: 
 dca6f3cc4ce93795f7d4b6626367a19f9294d35fcb59ae34164697e5a384ae52 1737 
postfix_2.10.0-2.dsc
 4a42a6029af418cbd4a8668b4f8c7e1ea9975cbe9756df760649c0a941bfeb7b 3826655 
postfix_2.10.0.orig.tar.gz
 bdc9db62c453a4d2367667d1d756f435e6d0f6b08d06cf69e144c661c5f59357 248570 
postfix_2.10.0-2.diff.gz
 f6c92d6ac8f1d2d809d767a73d458cb0b28e8bc4cda1dbdaa86e4e0194ab1a49 1612210 
postfix_2.10.0-2_amd64.deb
 d6fd7c5332e178dbb2d72e6a5fa7756573c2df34ca1f0f691d8d0d26e2f63267 268886 
postfix-ldap_2.10.0-2_amd64.deb
 b8296146f61089db101ef74e68f1fcda395e5732f4423bb37ba8a415fd7045f2 260000 
postfix-cdb_2.10.0-2_amd64.deb
 829f626cee48624a978919193e1fae516d9d379dd7ecd628197886c4c4f9c606 262004 
postfix-pcre_2.10.0-2_amd64.deb
 727708b6de89c852f63f602c369eb99126a32b3404a688ac8b748d1d49c14670 261960 
postfix-mysql_2.10.0-2_amd64.deb
 91b5bf524e82eb96e7e59516815f501023dacb902cac201543bf3835f6551a5e 262122 
postfix-pgsql_2.10.0-2_amd64.deb
 8cbe1f53aa6465134eedff52121af8d85a69673880aa93a896fc1b6b6b1c4ccf 372758 
postfix-dev_2.10.0-2_all.deb
 355c0e241852f3da78822878a9a3897bf786ddda73c5a2946ae76671bd395070 1302712 
postfix-doc_2.10.0-2_all.deb
Files: 
 6501843d35a22c5442eab2106858e318 1737 mail extra postfix_2.10.0-2.dsc
 b2a563b2d5c53462952886e6fc4e4b7b 3826655 mail extra postfix_2.10.0.orig.tar.gz
 b119f178a6c54e9b48a70572c02d9fdc 248570 mail extra postfix_2.10.0-2.diff.gz
 59d3627bcde1841d1154f0c4e26ee708 1612210 mail extra postfix_2.10.0-2_amd64.deb
 d8ba2ef7f16649f0f2d24ff6dac943a8 268886 mail extra 
postfix-ldap_2.10.0-2_amd64.deb
 2e713bbcdf462fa7e32d68d8b04f3faa 260000 mail extra 
postfix-cdb_2.10.0-2_amd64.deb
 8456703d4f18f47541555539d6512b4e 262004 mail extra 
postfix-pcre_2.10.0-2_amd64.deb
 8fb41585a992721861cf37414ce740f5 261960 mail extra 
postfix-mysql_2.10.0-2_amd64.deb
 db63dc530897f008cde211f717eaa164 262122 mail extra 
postfix-pgsql_2.10.0-2_amd64.deb
 985bc493a8f783a80148f71cfc7ec434 372758 devel extra 
postfix-dev_2.10.0-2_all.deb
 98f06a185c9833d6c8c4f9d10a411570 1302712 doc extra postfix-doc_2.10.0-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFRQeCpzN/kmwoKyScRAkdPAJ4wqacYWNqiI2+Kb7u3/A685cjFnQCcC0F3
u9mdE2OJ5PR1kJCKFEQnI10=
=qgNS
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to