Marcus Rueckert
4a313bda65
- update to 3.1.0 - Since version 3.0 postfix supports dynamic loading of cdb:, ldap:, lmdb:, mysql:, pcre:, pgsql:, sdbm:, and sqlite: database clients. Thats why the patches dynamic_maps.patch and dynamic_maps_pie.patch could be removed. - Adapting all the patches to postfix 3.1.0 - The patch postfix-db6.diff is not more neccessary - Backwards-compatibility safety net. With NEW Postfix installs, you MUST install a main.cf file with the setting "compatibility_level = 2". See conf/main.cf for an example. With UPGRADES of existing Postfix systems, you MUST NOT change the main.cf compatibility_level setting, nor add this setting if it does not exist. Several Postfix default settings have changed with Postfix 3.0. To avoid massive frustration with existing Postfix installations, Postfix 3.0 comes with a safety net that forces Postfix to keep running with backwards-compatible main.cf and master.cf default settings. This safety net depends on the main.cf compatibility_level setting (default: 0). Details are in COMPATIBILITY_README. - Major changes - tls * [Feature 20160207] A new "postfix tls" command to quickly enable opportunistic TLS in the Postfix SMTP client or server, and to manage SMTP server keys and certificates, including certificate signing requests and TLSA DNS records for DANE. * As of the middle of 2015, all supported Postfix releases no longer nable "export" grade ciphers for opportunistic TLS, and no longer use the deprecated SSLv2 and SSLv3 protocols for mandatory or OBS-URL: https://build.opensuse.org/request/show/373635 OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=232
31 lines
850 B
Diff
31 lines
850 B
Diff
--- src/tls/tls_client.c.orig 2016-03-16 09:45:17.686921418 +0100
|
|
+++ src/tls/tls_client.c 2016-03-16 09:46:24.431617807 +0100
|
|
@@ -369,6 +369,12 @@
|
|
SSL_CTX_set_security_level(client_ctx, 0);
|
|
#endif
|
|
|
|
+ /* Keep memory usage as low as possible */
|
|
+
|
|
+#ifdef SSL_MODE_RELEASE_BUFFERS
|
|
+ SSL_CTX_set_mode(client_ctx, SSL_MODE_RELEASE_BUFFERS);
|
|
+#endif
|
|
+
|
|
/*
|
|
* See the verify callback in tls_verify.c
|
|
*/
|
|
--- src/tls/tls_server.c.orig 2016-03-16 09:45:39.487150299 +0100
|
|
+++ src/tls/tls_server.c 2016-03-16 09:51:32.230678857 +0100
|
|
@@ -451,6 +451,12 @@
|
|
SSL_CTX_set_security_level(server_ctx, 0);
|
|
#endif
|
|
|
|
+ /* Keep memory usage as low as possible */
|
|
+
|
|
+#ifdef SSL_MODE_RELEASE_BUFFERS
|
|
+ SSL_CTX_set_mode(server_ctx, SSL_MODE_RELEASE_BUFFERS);
|
|
+#endif
|
|
+
|
|
/*
|
|
* See the verify callback in tls_verify.c
|
|
*/
|