Bugfix: he undocumented OpenSSL X509_pubkey_digest() function is

unsuitable for computing certificate PUBLIC KEY fingerprints. 
   Postfix now provides a correct procedure that accounts for
   the algorithm and parameters in addition to the key data.  Specify 
   "tls_legacy_public_key_fingerprints = yes" if you need backwards compatibility.

OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=160
This commit is contained in:
Peter Varkoly 2013-02-06 20:21:26 +00:00 committed by Git OBS Bridge
parent 30b1a304c7
commit 0669ab1b9e

View File

@ -5,6 +5,11 @@ Wed Feb 6 19:56:57 UTC 2013 - varkoly@suse.com
Bugfix: the local(8) delivery agent dereferenced a null pointer Bugfix: the local(8) delivery agent dereferenced a null pointer
while delivering to null command (for example, "|" in a .forward file). while delivering to null command (for example, "|" in a .forward file).
Bugfix: memory leak in program initialization. tls/tls_misc.c. Bugfix: memory leak in program initialization. tls/tls_misc.c.
Bugfix: he undocumented OpenSSL X509_pubkey_digest() function is
unsuitable for computing certificate PUBLIC KEY fingerprints.
Postfix now provides a correct procedure that accounts for
the algorithm and parameters in addition to the key data. Specify
"tls_legacy_public_key_fingerprints = yes" if you need backwards compatibility.
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Jan 17 22:01:16 UTC 2013 - varkoly@suse.com Thu Jan 17 22:01:16 UTC 2013 - varkoly@suse.com