From 169a7a0a519ead9c41d9b7a5bbc0b13eae03259b08d136d428e64fe0e0efda19 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Fri, 9 Aug 2024 08:59:19 +0000 Subject: [PATCH] - update to 5.2.9 * courier-debuild: implement DEBGCC=default, to help with pbuilder. - update to 5.2.8 * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH setting, fix warning with newer versions of grep. - update to 5.2.7 * tcpd: support per-local port custom -haproxy configuration. Multiple updates to the couriertcpd man page, updated documentation for ipv6 and CIDR support. * tcpd: remove -noidentlookup, implement -haproxy * couriertcpd: set the IP_FREEBIND option on all listening sockets. OBS-URL: https://build.opensuse.org/package/show/server:mail/courier-imap?expand=0&rev=129 --- .gitattributes | 23 + .gitignore | 1 + courier-imap-5.2.6.tar.bz2 | 3 + courier-imap-5.2.6.tar.bz2.sig | Bin 0 -> 141 bytes courier-imap-5.2.9.tar.bz2 | 3 + courier-imap-5.2.9.tar.bz2.sig | Bin 0 -> 142 bytes courier-imap-config.patch | 84 +++ courier-imap-gencert.service | 8 + courier-imap-sbindir.patch | 43 ++ courier-imap-ssl.service | 32 ++ courier-imap-ulimit_conf.patch | 30 + courier-imap.changes | 980 +++++++++++++++++++++++++++++++++ courier-imap.keyring | 77 +++ courier-imap.service | 29 + courier-imap.spec | 234 ++++++++ courier-pop-gencert.service | 8 + courier-pop-ssl.service | 32 ++ courier-pop.service | 26 + imap.pamd | 5 + pop3.pamd | 5 + 20 files changed, 1623 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 courier-imap-5.2.6.tar.bz2 create mode 100644 courier-imap-5.2.6.tar.bz2.sig create mode 100644 courier-imap-5.2.9.tar.bz2 create mode 100644 courier-imap-5.2.9.tar.bz2.sig create mode 100644 courier-imap-config.patch create mode 100644 courier-imap-gencert.service create mode 100644 courier-imap-sbindir.patch create mode 100644 courier-imap-ssl.service create mode 100644 courier-imap-ulimit_conf.patch create mode 100644 courier-imap.changes create mode 100644 courier-imap.keyring create mode 100644 courier-imap.service create mode 100644 courier-imap.spec create mode 100644 courier-pop-gencert.service create mode 100644 courier-pop-ssl.service create mode 100644 courier-pop.service create mode 100644 imap.pamd create mode 100644 pop3.pamd diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/courier-imap-5.2.6.tar.bz2 b/courier-imap-5.2.6.tar.bz2 new file mode 100644 index 0000000..5383bce --- /dev/null +++ b/courier-imap-5.2.6.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ac89cbd8e84bfb9e0e7bc9130304b0202a9d3192823d13956c88023f91661581 +size 3411210 diff --git a/courier-imap-5.2.6.tar.bz2.sig b/courier-imap-5.2.6.tar.bz2.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..61aaf86536d1cac1cd364ee0a3ffa2c73b65ef9122b8b32af4eb6738e56f1c57 GIT binary patch literal 141 zcmeC^W?>NHVlWX?WXW6R)UEQrDl_lrlIE_29~z6yf*!Flr6vi#6_d#=Do)IGNX{=U z%1kZN%`HjPOU}<_;Nld3DSQ^p@ZC52Mwr>Zef59huXat7PoDJjZOc#9zOaa=N4qwE r5b9)PxcHu9(T}%lf=-_PYk2)6bDM2)!^)qF-mToOooB7LsF)Q1F-btQ literal 0 HcmV?d00001 diff --git a/courier-imap-5.2.9.tar.bz2 b/courier-imap-5.2.9.tar.bz2 new file mode 100644 index 0000000..dd11598 --- /dev/null +++ b/courier-imap-5.2.9.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d8eecd4de90ad0f45d3179a58e008a54170727304d36fc3b5bbe3a04544287bc +size 3415384 diff --git a/courier-imap-5.2.9.tar.bz2.sig b/courier-imap-5.2.9.tar.bz2.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..25220445ea2b97537241054c78257c2c2fb2f64d35740ef0c975963df5db26d5 GIT binary patch literal 142 zcmeC^VPO#CVlWX?WXW6R)UEQrDl_lrlIE_29~z6yf*!FlrETK*A|{htRGgUWkepvy zl$lzjn_H5omz + +- update to 5.2.9 + * courier-debuild: implement DEBGCC=default, to help with pbuilder. + +- update to 5.2.8 + * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH + setting, fix warning with newer versions of grep. + +------------------------------------------------------------------- +Sat Aug 3 17:09:16 UTC 2024 - Arjen de Korte + +- update to 5.2.7 + * tcpd: support per-local port custom -haproxy configuration. + Multiple updates to the couriertcpd man page, updated documentation + for ipv6 and CIDR support. + * tcpd: remove -noidentlookup, implement -haproxy + * couriertcpd: set the IP_FREEBIND option on all listening sockets. + +------------------------------------------------------------------- +Sun Nov 26 16:59:53 UTC 2023 - Arjen de Korte + +- update to 5.2.6 + * Fix generated Date: header issues in timezones that have a + non-standard alternate timezone offset + * pop3 and imap logs also indicate whether the connections used + starttls or stls + * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist + +------------------------------------------------------------------- +Wed Aug 30 19:25:32 UTC 2023 - Arjen de Korte + +- update to 5.2.5 + * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set. + * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for + rogue symlinks in maildirs. +- update courier-imap.keyring with new signing key + +------------------------------------------------------------------- +Sun Apr 30 14:22:53 UTC 2023 - Arjen de Korte + +- update to 5.2.4 + * Fix spurious gcc 13 compiler warnings. Have configure script + include the standardized location of the CA certificate bundle, + in addition to various legacy compatibility paths. + +------------------------------------------------------------------- +Wed Apr 5 11:27:09 UTC 2023 - Arjen de Korte + +- update to 5.2.3 + * all: update configure.ac to require at least version 2.0.5 of + libidn + +------------------------------------------------------------------- +Mon Feb 20 08:45:57 UTC 2023 - Arjen de Korte + +- update to 5.2.2 + * imapd.c (append): No longer accept a non-standard single + flag name instead of a parenthesized flag list to APPEND, due to + ambiguity with the UTF8 extension. + +------------------------------------------------------------------- +Thu Jan 12 17:42:55 UTC 2023 - Stefan Schubert + +- Migration of PAM settings to /usr/lib/pam.d. + +------------------------------------------------------------------- +Sun Dec 18 09:30:09 UTC 2022 - Arjen de Korte + +- update to 5.2.1 + * Fix a compatibility problem with OpenSSL 3 that results in TLS + negotiation failures in some non-default configurations. + * Fix an error in courier-imap's installation script that results in + creation of absolute, rather than relative, symbolic links. + +------------------------------------------------------------------- +Sun Dec 4 20:16:13 UTC 2022 - Arjen de Korte + +- update to 5.2.0 + * Switch to libidn2. + * Debian/Ubuntu: update lintian overrides + * make install: replace absolute links with relative links. + +- update to 5.1.9 + * Adjust deb packaging. Check /etc/lsb-release and include the + distribution release in the deb package version, to faciliate + updating to the same version of the package in an updated release. + * Fix build dependencies. + +------------------------------------------------------------------- +Sat Aug 20 19:07:14 UTC 2022 - Arjen de Korte + +- update to 5.1.8 + * gcc 12 and autotools update. OpenSSL 3.0 update. + * courier, courier-imap: remove the --disable-root-check configure + option, now that make check can deal with it. + * Add scripts to create installable .deb packages, update + documentation. + * imap/authenticate_auth.c: Fix broken SASL authentication. + * Adjust behavior of inherited ACLs. After deleting and recreating + a folder, have the recreated folder inherit its parent folder's ACLs, + normally, instead of mysteriously restoring whatever ACLs the folder + had when it was deleted. + * Fixes to Makefile to workaround test suite failures related to + permission checking when make check runs as root. + * Fix minor memory leaks. + +------------------------------------------------------------------- +Mon Jan 17 07:29:18 UTC 2022 - Arjen de Korte + +- update to 5.1.7 + * Fix linking failure on some Linux distributions. + +- update to 5.1.6 + * Fix linking failure on some Linux distributions. + +- update to 5.1.5 + * Fix minor memory leaks. If valgrind is installed, "make check" will + run it to check for memory leaks. + * Convert to PCRE2. + * libcouriertls: use ALARM to kill couriertls if the server process + terminates but openssl hangs trying to shut down the socket. + +------------------------------------------------------------------- +Mon Aug 2 09:16:44 UTC 2021 - Arjen de Korte + +- update to 5.1.4 + * all: code changes so that courier can be compiled with -Wall + -Werror gcc flags. The default compilation flags are not changed. + This also includes changes to the configuration scripts, which + includes removing outdated configuration settings. + * pop3: buffer input by ourselves, clear input buffer before + switching to TLS. + * imap: fix crash if the connection to the client is terminated at + the wrong/right time. + +------------------------------------------------------------------- +Sun Apr 25 12:29:04 UTC 2021 - Arjen de Korte + +- update to 5.1.3 + * pop3d: pro-forma POP3 LANG extension. + * pop3d-ssl.dist.in (TLS_STARTTLS_PROTOCOL): Remove duplicate entry + in the pop3d-ssl configuration file. + +------------------------------------------------------------------- +Sat Mar 27 14:54:45 UTC 2021 - Arjen de Korte + +- update to 5.1.2 + * make: Individual files that did not end in a newline were + not handled correctly. + * imap: adjust error message. + +------------------------------------------------------------------- +Sun Mar 21 09:44:47 UTC 2021 - Arjen de Korte + +- update to 5.1.1 + * Fix swapped TLS_CACHEFILE settings in the IMAP and POP3 + configuration files + +------------------------------------------------------------------- +Sat Mar 20 10:03:07 UTC 2021 - Arjen de Korte + +- update to 5.1.0 + * Implement support for the TLS ALPN extension. + * Replace FAM/Gamin with inotify. + * Install the maildirwatch tool. + * Remove the IMAP_ENHANCEDIDLE setting from the imapd configuration + file. + +- update source download URL +- remove courier-imap-Makefile.patch (upstreamed) + +------------------------------------------------------------------- +Tue Mar 2 07:36:29 UTC 2021 - Arjen de Korte + +- update to 5.0.14 + * Fix packaging problem with a faulty courier-unicode dependency + +- update to 5.0.13 + * Fixes a crash caused by a malformed DNS query/response + +- move SSL cache files to /var/cache/courier-imap/ and put (open)SUSE + specific changes to configuration files in a patch file (instead of + sed scripts) + + courier-imap-config.patch +- remove obsolete SysV init files + - courier-imap.init + - courier-imap-ssl.init + - courier-pop.init + - courier-pop-ssl.init + +------------------------------------------------------------------- +Wed Feb 10 08:53:30 UTC 2021 - Arjen de Korte + +- update to 5.0.12 + * openssl: Add TLS_PROTOCOL setting to disable client-initiated + renegotiation. + * imap: send corrupted Unicode alerts only for new messages. + * waitlib: fix testwait.c failure with LTO enabled on F33. + * pop3login.c: fflush before STARTLS. + +------------------------------------------------------------------- +Fri Jun 19 08:25:12 UTC 2020 - Arjen de Korte + +- update to 5.0.11 + * courier-authlib API update. + * Add AC_PROG_CC_C99 to configure +- remove courier-imap-stdc.patch (no longer needed) + +------------------------------------------------------------------- +Thu May 28 11:44:19 UTC 2020 - Arjen de Korte + +- update to 5.0.10 + * tcpd/starttls.c (dossl): Start client after negotiating SSL, in + order to allow EXTERNAL client certificate authentication. + * Fix virtual IP and hostname handling when using GnuTLS for SSL. + * imap, pop3: include remote port TCP port number together with the + IP address, in log messages. +- add courier-imap-stdc.patch to remove 'for' loop initial declarations + +------------------------------------------------------------------- +Tue Nov 12 15:23:15 UTC 2019 - Arjen de Korte + +- update to 5.0.8 + * Update documentation in the imapd and pop3d ssl config flies. +- update to 5.0.7 + * pop3dserver.c (do_retr): Use the new MIME_UNICODE_MESSAGE_TYPE + setting to set the type of the wrapped MIME attachment. +- update to 5.0.6 + * pop3dserver.c: Fix parsing of pop3d file cache, on some + architectures. + * tcpd/libcouriertls.c: Ignore unreadable cert files. +- update to 5.0.5 + * fetch.c: Send an alert about a Unicode messages to a non-Unicode + client at most once per IMAP session. +- update to 5.0.4 + * pop3dserver.c: Deal with MS Outlook's broken implementation of + RFC 6856. +- update to 5.0.3 + * pop3dserver.c (calcsize): Fix spurious flagging of non-UTF8 + messages as UTF-8. + To fix existing mailboxes with erroneously-flagged messages. In + each mailbox, if its existing courierpop3dsizelist file starts with + /3 [followed by additional data] + Only if the first line in courierpop3dsizelist starts with /3, then + execute: + perl -p -i -e 's/:\d+$/:0/' courierpop3dsizelist + * pop3dserver.c (readpop3dlist): Be able to update + courierpop3dsizelist from version 2 to 3 in place. + (do_retr): Instead of returning an ERR to a non-Unicode client, + handle Unicode messages by wrapping them as an attachment. +- update to 5.0.2 + * configure.ac: Additional changes to how Unicode messages are + handled with non-Unicode clients: disclaim all warranties, still + report an error, but provide the raw message content, as is. +- update to 5.0.1 + * Provide an substitute message to IMAP clients that did not enable + UTF-8. + * couriertls: additional fixes. + * couriertls: option to use a separate file for the SSL certificate's + private key, as an alternative to the combined keyfile+certificate. +- update to 5.0.0 + * pop3dserver.c: update Courier-IMAP to support UTF8 POP3. Update + version of the courierpop3dsizelist cache file. + * courier-imap, sqwebmail: update Courier-IMAP to support UTF8 IMAP. + Convert maildir folders to use UTF-8 for folder names. Add + --checkutf8 and --convutf8 options to maildirmake to convert + pre-UTF8 maildirs to UTF8 maildirs, a mandatory upgrade procedure. + * waitlib/configure.ac: Fix typo. + * libs/tcpd/starttls.c (main): Add -user option. Additional fixes + to startup script to have couriertls drop root privileges. + * libs/tcpd/tlsclient.h: add username option, used in couriertls_start + to set the child process's uid and gid. + * imaplogin.c (starttls): Set username option for couriertls + * pop3login.c (starttls): Set username option for couriertls + * imapd-ssl.dist, pop3d-ssl.dist: Use separate imap and pop3 session + cache files. Startup script: remove/set ownership and permsission + on the imap and pop3 session cache files. + * libs/tcpd/libcouriergnutls.c: Remove usage of deprecated OpenPGP + API. Tag the "Unexpected SSL connection shutdown" with the "DEBUG" + label just like the OpenSSL version does. + * libs/tcpd/starttls.c: If TCPREMOTEIP is set, prepend it to error + messages. +- delete reproducible.patch (upstreamed) +- add courier-imap.keyring for source verification +- cleanup spec + +------------------------------------------------------------------- +Fri Jul 19 09:50:17 UTC 2019 - matthias.gerstner@suse.com + +- removal of SuSEfirewall2 services, since SuSEfirewall2 has been replaced by + firewalld, see [1]. + + [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html + +------------------------------------------------------------------- +Tue Jun 11 12:38:44 UTC 2019 - Dominique Leuenberger + +- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to + shortcut the build queues by allowing usage of systemd-mini + +------------------------------------------------------------------- +Thu Jan 3 10:09:46 UTC 2019 - Bernhard Wiedemann + +- Add reproducible.patch to override build date (boo#1047218) + +------------------------------------------------------------------- +Mon Dec 4 11:55:19 UTC 2017 - suse+build@de-korte.org + +- update to 4.18.2 + * imapd.c (do_folder_delete): Fix check for DELETE INBOX. + * libs/maildrop/maildir.C (MaildirSave): Fix new/delete mismatch. + * libs/sqwebmail/gpg.c: Fix external linkage. + * libs/tcpd/libcouriertls.c: OpenSSL API update. + * courier-unicode library API update. + * libs/maildir/maildirquota.c (docheckquota): Skip DT_LNK. + * OpenSSL 1.1.0 compilation fixes. + * courier: switch default header encoding to UTF-8. + * Fix to configure.ac + +------------------------------------------------------------------- +Mon Feb 20 14:53:44 CET 2017 - kukuk@suse.de + +- Don't call insserv if we use systemd +- Don't install LSB init scripts if we use systemd +- Create rc* links to service command if we use systemd + +------------------------------------------------------------------- +Fri May 20 10:34:20 CEST 2016 - kukuk@suse.de + +- Remove directories already part of filesystem rpm + +------------------------------------------------------------------- +Tue May 17 13:24:37 CEST 2016 - kukuk@suse.de + +- Fix path of SuSEfirewall2.d directory + +------------------------------------------------------------------- +Mon May 16 12:59:14 UTC 2016 - chris@computersalat.de + +- update to 4.17.1 + * Fix TLS SNI code. +- update to 4.17.0 + * Stop using SSL2 and SSL3 openssl configuration methods. + * libs/tcpd/libcouriertls.c: Add support for TLS SNI. + * imaplogin.c (starttls): flush stdin after negotiating STARTTLS. + * Fix Courier-IMAP rpm build on pre-systemd systems. +- rebase courier-imap-Makefile.patch + +------------------------------------------------------------------- +Wed Aug 5 01:45:26 UTC 2015 - chris@computersalat.de + +- update to 4.16.2 + * imap/mailboxlist.c (match_mailbox_prep): Use strncmp instead of + memcmp, to pacify overzealous static analysis checkers. + * Drop SSLv3 from TLS_CIPHER_LIST. + * imap, pop3: Added AUTH_MKHOMEDIR_SKEL setting. +- update to 4.16.1 + * maildircache.c: fix use after free. + * mkdhparams: make compatible with libressl + * Handle 01-Jan-1970 for date-based searches. + * Update to courier-unicode 1.2. + * Add the makeimapaccess script. +- add Patch courier-imap-Makefile.patch + +------------------------------------------------------------------- +Wed Oct 29 22:05:29 UTC 2014 - chris@computersalat.de + +- update to 4.15.1.20141122 + * tcpd/libcouriertls.c: add parsing options for different protocol + combination. + * Update comments in *ssl config files. + * libs/tcpd/libcouriertls.c (tls_create): Set SSL_OP_NOSSLv3 flag, + to disable SSL3 support. + * mkdhparams: TLS_DHPARAMS environmnt variable overrides default + DH parameter file location. + * courier-imap.spec.in: generate the default DH parameter file and + package it into the rpm, instead of generating one on the first + start. + * libs/maildir/maildirinfo.c (maildir_info_imapmunge): Fix + UTF-8 charset name. + * tcpd/libcouriertls.c (tls_create): Initialize temporary ecdh + parameters. + * imap: try to print a message on stderr if the alarm() call, that + detects FAM library breakage, goes off. + * mkdhparams: default to 2048 DH params for OpenSSL. + * courier-imap.service: bump up startup timeout, initial service start + may take several minutes to generate DH parameters for the first + time. +- add new dependency + * courier-unicode-devel (libunicode) + +------------------------------------------------------------------- +Thu Sep 25 15:19:51 UTC 2014 - chris@computersalat.de + +- fix courier-imap.service + * STARTTLS on port 143 (thanks to cschweingruber) + +------------------------------------------------------------------- +Sat Mar 15 20:24:10 UTC 2014 - chris@computersalat.de + +- update to 4.15 + * pop3login.c (starttls): Clear input buffer after STARTTLS. + * imaplogin.c (starttls): Clear input buffer after STARTTLS. + * Fix various compiler warnings about unchecked results from setuid + and setgid calls. + * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the + TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality. + Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS + environment variable. + * mkdhparams: New script that generates DH parameters into a standalone + file. + * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and + esmtpd-ssl. Add TLS_DHPARAMS. + * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl, + set default number of bits for RSA keys to 4096. + * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and + TLSv1_2 method(), based on patch by Rob Austein . + * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the + documentation of TLS options in various config files. +- added systemd service files +- fix build for SLE + * fam-devel vs gamin-devel +- cleanup spec + * RPM_BUILD_ROOT -> buildroot + +------------------------------------------------------------------- +Wed Jan 8 13:53:33 UTC 2014 - adrian@suse.de + +- use gamin-devel instead of unmaintained fam(-devel) package + +------------------------------------------------------------------- +Mon Nov 11 21:11:56 UTC 2013 - chris@computersalat.de + +- update to 4.14.0 + * Autotool chain update. + * imapd.c (mddelete): Reject DELETE folder if the maildir is a symlink. + * imapd.c (doId): Implement the IMAP ID EXTENSION. +- 4.13.0 + * imap: add explicit mkdirs on PIDFILE directories to startup scripts. + * rfc822: workaround for invalid utf-8 input making libidn go off the + rails. +- fix License + * GPL-3.0 -> GPL-3.0+ +- rebase patches + * imap-sbindir, imap-ulimit_conf + +------------------------------------------------------------------- +Tue Jan 15 18:05:58 UTC 2013 - chris@computersalat.de + +- update to 4.12.0 + * tcpd/libcouriergnutls.c (get_server_cert): Fix size of malloced + buffer. + * configure.in: Fix typo in configure check for setvbuf(). +- rebase patches + * sbindir (remove version), ulimit_conf (rename diff -> patch) + +------------------------------------------------------------------- +Fri Sep 21 09:23:57 UTC 2012 - chris@computersalat.de + +- update to 4.11.0 + * maildir/maildiraclt.c (maildir_acl_delete): Fix double-free on error + path of an ENOMEM. + * courier.spec.in: Fix the RPM spec to work around /bin symlink + breakage in F17. + * tcpd/tcpd.c: Update libgnutls API, replace obsoleted functions + with current API. Obsoletes most TLS_* variables that set protocol + priorities, replaced with Gnutls-specific single TLS_PRIORITY + setting (existing TLS_* variables are still used by the OpenSSL + alternative). Updated *-ssl configuration files accordingly. + * tcpd: Compilation changes for gnutls 3 + * liblock/mail.c (dotlock_exists): Quell a compiler warning. + * Miscellaneous spelling fixes. +- rebase sbindir patch (4.8.0 -> 4.11.0) + +------------------------------------------------------------------- +Sat Jan 7 19:20:08 UTC 2012 - chris@computersalat.de + +- update to 4.10.0 + * imapd.c (main): Open IMAPDEBUGFILE only if it exists already. + (do_expunge): Optionally log deletions. Based on a patch by + William Yodlowsky . + * pop3dserver.c (cleanup): Optionally log deletions. Based on a patch by + William Yodlowsky . + * imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how + IMAPDEBUGFILE works. + * imapscanclient.c: Postpone Y2038K for a while, for uid validities. + * liblock/mail.c (dotlock_exists): Handle getting here because of a + recycled pid. + * unicode/unicode.c (init_default_chset): Handle NULL from setlocale(). + * rfc2045/reformime.c (main2): Fixed segfault on some arches from an + initial null given to strtok. + * rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly + memory. + * pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist + if it fails with ESTALE. + * pop3d.dist.in: Add AUTHSERVICE settings. They've been supported + all along. + * Fix gcc 4.6 warnings + * courier-imap.spec.in: switch to systemd. Remove script used when + upgrading from ancient pre-sysconftool versions. + * Fix autoconf warnings. + +------------------------------------------------------------------- +Wed Sep 21 23:11:38 UTC 2011 - chris@computersalat.de + +- change --with-authdaemonvar to /var/run/courier-authlib + +------------------------------------------------------------------- +Fri May 27 19:16:25 UTC 2011 - chris@computersalat.de + +- update to 4.9.3 + * msgenvelope.c (msgappends): Fix a fatal error upon encountering + 8-bit header content. Heuristically try to interpret it as UTF-8, and + just ignore invalid UTF-8 sequences. + - 4.9.2 + * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters + in quoted-printable-encoded content. + * unicode/unicode.c: Compilation fixes. + +------------------------------------------------------------------- +Sun May 1 20:46:37 UTC 2011 - chris@computersalat.de + +- update to 4.9.1 + * tcpd/libcouriertls.c (tls_create): Remove SSLv2_method(). + (tls_create): Remove "!SSLv2" from the default TLS_CIPHER_LIST. + * mkimapdcert.in (prefix): Create imapd.pem with 600 perms. + * mkpop3dcert.in (prefix): Create pop3d.pem with 600 perms. +- for more info please see Changelog file +- fix License + o GPLv2+ -> GPLv3 +- fix path to ChangeLog file + +------------------------------------------------------------------- +Mon Oct 11 12:46:50 UTC 2010 - chris@computersalat.de + +- update to 4.8.1 + * Makefile.am (imapd.cnf): Compatibility fixes. +- 2010-08-15 Sam Varshavchik + * maildir/maildirwatch.c (maildirwatch_alloc): Use alarm() to kill + the process if FAMOpen() takes more than 15 seconds to return. + Should prevent a hung process if FAM/Gamin is fubared. +- 2010-07-11 Sam Varshavchik + * pop3dserver.c: Make printed() and putchar() macros. +- 2010-07-01 Sam Varshavchik + * imapd.cnf pop3d.cnf (default_md): added default_md = sha1 +- 2010-06-28 Sam Varshavchik + * rfc822/rfc822.c (rfc822_print_common_nameaddr): Prevent segfault if + address decode fails. + * Fix make check failure when libidn is not available. +- 2010-05-31 Sam Varshavchik + * Rebuilt man pages with updated stylesheets. +- remove obsolete certsdir patch +- remove LDFLAGS patch, add configure option --disable-static + +------------------------------------------------------------------- +Thu Aug 5 16:06:36 UTC 2010 - chris@computersalat.de + +- have pop3d, imapd ssl certs in /etc/ssl/private + [bnc#628487]; certsdir patch + +------------------------------------------------------------------- +Mon Jul 5 15:21:53 UTC 2010 - chris@computersalat.de + +- update to 4.8.0 + * tcpd/configure.in: Check if explicit linking with libgpg-error is + required. +- 2010-03-20 "Stefan Hornburg (Racke)" + * imapd.c (main): Fix typo in alert message. +- 2010-03-18 Hugo Monteiro + * Big quota patch (with some changes). +- 2010-03-12 Sam Varshavchik + * imapd.c (main): Dummy FAM/Gamin initialization, report an error + during login, upon a failure. +- 2010-03-10 Sam Varshavchik + * imapd.c (imapenhancedidle): Make FAM error more meaningful. +- 2010-02-25 Bernard Quatermass + * pop3dserver.c (main): "disableinsecurepop3" account option disables + non-SSL logins. + * imapd.c (chkdisabled): "disableinsecureimap" account option disables + non-SSL logins. +- reworked sbindir patch + +------------------------------------------------------------------- +Sat Jul 3 12:36:09 CEST 2010 - meissner@suse.de + +- buildrequire openssl so configure finds /usr/bin/openssl bnc#619665 + +------------------------------------------------------------------- +Mon May 17 14:39:54 UTC 2010 - chris@computersalat.de + +- fix path to TLS_TRUSTCERTS (imap-ssl,pop3d-ssl) + o added --with-certdb=%{_sysconfdir}/ssl/certs + +------------------------------------------------------------------- +Wed Feb 24 22:52:23 UTC 2010 - chris@computersalat.de + +- update to 4.7.0 + * lot of changes, see ChangeLog +- reworked LDFLAGS patch (fuzz 0) + +------------------------------------------------------------------- +Tue Oct 6 14:32:54 CEST 2009 - chris@computersalat.de + +- update to 4.6.0 + * outbox.c (imapd_sendmsg): Renamed sendmsg() to avoid library name + clash. + * tls: change the default OpenSSL configuration to disable anonymous + authentication ciphers + +------------------------------------------------------------------- +Sat Sep 5 21:31:42 CEST 2009 - chris@computersalat.de + +- spec mods + o resorted Tags + +------------------------------------------------------------------- +Sat Sep 5 18:37:12 CEST 2009 - chris@computersalat.de + +- update to 4.5.1 + * all: gcc 4.4 fixes + * fetch.c (open_cached_fp): If the message file cannot be opened, + create a dummy message in its place. +- spec mods + o added missing norootforbuild + o fix patch naming patch0 +- mod to imapd.dist + o increased MAXPERIP from 10 to 20 + thunderbird does 5 con per account, if not known by user + he will come into trouble + +------------------------------------------------------------------- +Wed Aug 26 15:23:37 UTC 2009 - chris@computersalat.de + +- spec mods + o fix typo missing '%'if + +------------------------------------------------------------------- +Thu Aug 20 18:40:15 CEST 2009 - chris@computersalat.de + +- cleanup spec file + o removed all #---- lines + o added configure macro +- merge .spec with o:F +- merge .changes with o:F + +------------------------------------------------------------------- +Thu Aug 20 18:22:26 CEST 2009 - opensuse@cboltz.de + +- read ssl config files in non-ssl initscripts if TLS is enabled + [bnc#420972#c2] + +------------------------------------------------------------------- +Tue Jul 7 13:49:32 CEST 2009 - chris@computersalat.de + +- fixed self prov error (imap) + +------------------------------------------------------------------- +Sun May 24 02:44:35 CEST 2009 - chris@computersalat.de + +- new version 4.5.0 + o Documentation refresh. + o pop3dserver.c: s/POP3_STLS/POP3_TLS/, for correct logging. + o imaprefs.c (dorefcreate): Clean up usage of rfc822_threadsearchmsg(). + A malloc() failure wasn't checked correctly. + o rfc2045/rfc2045_fromfd.c: Optimize header parsing. + o search.c: Empty MIME entities would always match any SEARCH. Reported + by Dmitry Osipov. + o tcpd/configure.in: --without-gnutls forces suppression of GnuTLS when + OpenSSL is not present. + o tcpd/libcouriergnutls.c (tls_connect): Fix client certificate request + settings. + o tcpd/libcouriergnutls.c (set_cert): Add support for certificates + signed by an intermediate CA. + o imapwrite.c (write_error_exit): Dump fatal errors to stderr. +- new sbindir (failed), LDFLAGS (hunk) patch +- some spec fixes + o updated header + o updated description + o added ChangeLog, README.proxy + o fixed init install (0755) + o conflicts with cyrus-imapd +- fixed init scripts + o removed X-United stuff +- rpmlint stuff + o install-no-mkdir-buildroot + o removed old Obsoletes + o fixed non-conffile-in-etc + +------------------------------------------------------------------- +Sun May 24 00:55:12 CEST 2009 - chris@computersalat.de + +- fixed differences of changelog + o my fault, added changes to spec, now fixed :) + +------------------------------------------------------------------- +Sat Nov 15 15:22:56 CEST 2008 - chris@computersalat.de + +- some rpmlint stuff + o modified post: insserv courier-* + +------------------------------------------------------------------- +Tue Sep 16 15:43:41 CEST 2008 - hvogel@suse.de + +- Fix init scripts without ssl to not include ssl config files + [bnc#420972] + +------------------------------------------------------------------- +Fri Sep 12 14:08:12 CEST 2008 - hvogel@suse.de + +- Fix protocol names in firewall service files [bnc#425216] + +------------------------------------------------------------------- +Mon Sep 8 13:59:46 CEST 2008 - hvogel@suse.de + +- update to 4.4.1 + * Update descriptions of maildir quotas + * Use the couriertls library to invoke couriertls. SASL + authentication did not correctly handle the special case of "=" + passed as the initial response to indicate an empty initial + response. Switch to the new auth_sasl_ex() API. + * Check the environment variables for subject fields set by + couriertls. Advertise the AUTH EXTERNAL capability, if they + are set. + * Optimize IMAP keyword implementation. Faster results in exchange + for a concurrency tradeoff if two concurrent sessions attempt to + update keywords for the same message at the same time + * Backslashed special characters in address names weren't being + dequoted correctly + * Add a timeout to the POP3 login stage + * Fix SSL initialization + * Fix TLS session caching + +------------------------------------------------------------------- +Mon Apr 14 10:29:49 CEST 2008 - aj@suse.de + +- Remove executable permissions from README files. + +------------------------------------------------------------------- +Wed Apr 2 15:08:52 CEST 2008 - hvogel@suse.de + +- update to version 4.3.1 + * make SSL23 default tls protocol + * update description of SSL/TLS-related settings + * introduce IMAP_MAILBOX_SANITY_CHECK + * Explicitly make stderr line-buffered + * Suppress spurious error message in imap.c +- fix some rpmlint warnings + +------------------------------------------------------------------- +Thu Jan 17 13:19:29 CET 2008 - mskibbe@suse.de + +- update to version 4.3.0 which + o Fix some Bugs + o Fix SSL session caching bug + o Make skew check more reliable + o code cleanup + +------------------------------------------------------------------- +Wed Nov 21 10:33:13 CET 2007 - mskibbe@suse.de + +- Bug 342601 - courier-imap rc and config bugs + +------------------------------------------------------------------- +Fri Nov 16 08:32:29 CET 2007 - mskibbe@suse.de + +- Bug 341267 - courier-imap-ssl configuration problems + +------------------------------------------------------------------- +Mon Oct 22 17:38:19 CEST 2007 - sbrabec@suse.cz + +- Use correct SuSEfirewall2 rule directory. + +------------------------------------------------------------------- +Wed Apr 25 09:50:13 CEST 2007 - mskibbe@suse.de + +- update to version 4.1.3 which includes: + o fix memory leak + o checks for malloc failures + o updated man pages + o cleaned up configure script + o bug fixes + +------------------------------------------------------------------- +Mon Apr 23 12:39:17 CEST 2007 - mskibbe@suse.de + +- SuSEfirewall2 service file installed in wrong dir/broken + (#266949) + +------------------------------------------------------------------- +Thu Mar 29 11:30:19 CEST 2007 - rguenther@suse.de + +- add procps BuildRequries because of interesting configure checks + +------------------------------------------------------------------- +Mon Mar 26 12:29:29 CEST 2007 - rguenther@suse.de + +- add gdbm-devel BuildRequires + +------------------------------------------------------------------- +Wed Mar 14 14:24:20 CET 2007 - mskibbe@suse.de + +- fam has no address, rejected by xinetd, when called from + courier-imap (#253437) + +------------------------------------------------------------------- +Fri Mar 2 13:26:27 CET 2007 - mskibbe@suse.de + +- courier : Support for FATE #300687: Ports for SuSEfirewall added + via packages (#250575) +- fix file list +- update to version 2.1.2 which + o Clarify some error messages + o Try to log bandwidth usage before getting killed by a signal + o Fix many compiler warnings + o Fix segfault if non-cert files were found in the cert dir + o Added koi8-u character set + +------------------------------------------------------------------- +Mon Feb 12 11:02:28 CET 2007 - mskibbe@suse.de + +- fix mkpop3dcert and mkimapdcert. Now they use pem files from + /etc/courier-imap/ + +------------------------------------------------------------------- +Mon Feb 5 12:34:55 CET 2007 - mskibbe@suse.de + +- Courier generates certificates in /usr/share/courier-imap + (#241937) + +------------------------------------------------------------------- +Mon Jan 22 08:53:39 CET 2007 - mskibbe@suse.de + +- checkproc uses -p parameter not as specified in man page + (#230806) + +------------------------------------------------------------------- +Mon Sep 11 13:05:45 CEST 2006 - tpatzig@suse.de + +- Add Conflict to qpopper + +------------------------------------------------------------------- +Tue Aug 1 14:49:40 CEST 2006 - mskibbe@suse.de + +- update to version 4.1.1 which + o fixed some compiler warnings + o fix segfault if non-cert files were found in the cert dir + o Added koi8-u character set + o fix quota calculations on 32 bit platforms with 64 bit off_t + o Don't assume that connect() of a non-blocking socket always + fails with INPROGRESS + +------------------------------------------------------------------- +Wed Jan 25 21:35:11 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Tue Dec 6 10:54:05 CET 2005 - kukuk@suse.de + +- Don't link static + +------------------------------------------------------------------- +Mon Nov 14 11:58:37 CET 2005 - kukuk@suse.de + +- Add postfix to nfb to fix location of sendmail [#133327] + +------------------------------------------------------------------- +Wed Nov 2 16:36:29 CET 2005 - kukuk@suse.de + +- Update to version 4.0.6 + +------------------------------------------------------------------- +Fri Sep 23 11:37:09 CEST 2005 - kukuk@suse.de + +- Fix imapd and pop3d init scripte for SSL connections [#113213] + +------------------------------------------------------------------- +Mon Sep 19 10:26:35 CEST 2005 - kukuk@suse.de + +- Update to version 4.0.5 + +------------------------------------------------------------------- +Fri Aug 26 12:45:24 CEST 2005 - kukuk@suse.de + +- Rename courier-pop3* init scripts to courier-pop* to be + LSB conform +- Source imapd-ssl and pop3-ssl from init scripts [#113213], + use correct SSLPIDFILE variable and add path to checkproc + +------------------------------------------------------------------- +Wed Aug 3 17:58:47 CEST 2005 - kukuk@suse.de + +- Update to version 4.0.4 + +------------------------------------------------------------------- +Thu Jul 21 13:11:47 CEST 2005 - kukuk@suse.de + +- Use Maildir from config file [#94231] +- If user removed PIDFILE entry from config file, set default + one [#85845] + +------------------------------------------------------------------- +Thu Nov 18 16:13:25 CET 2004 - kukuk@suse.de + +- Update to release 3.0.8 + +------------------------------------------------------------------- +Mon Nov 15 14:36:25 CET 2004 - kukuk@suse.de + +- Use common-* PAM config files for imap and pop3 + +------------------------------------------------------------------- +Mon Sep 6 13:58:53 CEST 2004 - kukuk@suse.de + +- Fix permission of /usr/lib/courier-imap/authlib/authdaemond.ldap + [#44721] + +------------------------------------------------------------------- +Mon Aug 16 13:06:02 CEST 2004 - kukuk@suse.de + +- Update to bug fix release 3.0.7 + +------------------------------------------------------------------- +Wed May 12 17:26:08 CEST 2004 - kukuk@suse.de + +- Update to 3.0.3 + +------------------------------------------------------------------- +Thu Mar 25 17:24:18 CET 2004 - mmj@suse.de + +- Add postfix to # neededforbuild + +------------------------------------------------------------------- +Wed Mar 17 10:34:32 CET 2004 - kukuk@suse.de + +- Update to 3.0.2: vpopmail password fixes, filesystem/ACL fixes + +------------------------------------------------------------------- +Mon Mar 8 14:57:30 CET 2004 - kukuk@suse.de + +- Update to official 3.0.0 release + +------------------------------------------------------------------- +Mon Feb 9 09:56:22 CET 2004 - kukuk@suse.de + +- Update to official 2.2.1 release + +------------------------------------------------------------------- +Sat Jan 10 16:12:16 CET 2004 - adrian@suse.de + +- build as user + +------------------------------------------------------------------- +Fri Aug 29 14:10:05 CEST 2003 - kukuk@suse.de + +- Add conflict with imap package + +------------------------------------------------------------------- +Tue Aug 26 09:11:00 CEST 2003 - kukuk@suse.de + +- Fix typo in spec file +- Update to 2.1.1 + +------------------------------------------------------------------- +Sun Aug 3 18:29:57 CEST 2003 - aj@suse.de + +- Package sysconftool also. + +------------------------------------------------------------------- +Fri Aug 1 10:30:38 CEST 2003 - kukuk@suse.de + +- Rename imapd.8 to courier-imapd.8 to resolve file conflicts. + +------------------------------------------------------------------- +Wed Jul 30 21:02:52 CEST 2003 - kukuk@suse.de + +- Initial version + diff --git a/courier-imap.keyring b/courier-imap.keyring new file mode 100644 index 0000000..38cf362 --- /dev/null +++ b/courier-imap.keyring @@ -0,0 +1,77 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEZMuHLRYJKwYBBAHaRw8BAQdAe5JtcuSmqfCc9heHcxw01+ldcRpzdgIrpIX5 +jkkimDO0J1NhbSBWYXJzaGF2Y2hpayA8bXJzYW1AY291cmllci1tdGEuY29tPoiZ +BBMWCgBBFiEEbqZCiyT/emlu+aSDimD4KKI2UuIFAmTLhy0CGwMFCRLZMgAFCwkI +BwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQimD4KKI2UuJ2XgEA6GptTHupqpaz +rv5GGN3AVga+XyOtzG6TvVu2BvYdS10BAOyw4SARKv4BYmdfD4mERxE7XNZDs0fF +DIB1C5rJzgAKiQIzBBABCAAdFiEEMWrVnbBKLOeG9ifkazpiviedvyUFAmTLiPEA +CgkQazpiviedvyXMBhAAnO5/nlyyJTVkiwLxfHj7j6A50oByON5cu+1bwkLIXACx +2IBhFlaEJ694EPIQf8EvALrGu9Dh3+XySM4wQkOvhOE9D15KYBBf3x68xYzHbjfS +jNoweDa23P+RRF3HFIDIHgyc4A9haFTU+utD9eEXjU/gEdTIXCKlSxGYxCjrJLjC +vJkPnTDeq6msj4YRRyOsSqpryihuniDVA0T4QIXTfgFhQVY9dzhxdZ/vY+hNj6If +nEkGm3WWY4nQ4DZvNJ+vuOkS9p3PnllUhMkvYpBV8/8GkSTfkR3tMhtHaQW/AnvX +b/Qll7GuLH4stg9QkDF5ueDWXpA4Fu1HfO6XP+Y2xdM/6upqJZpm+/dseQZUdC2V +f0EVY3IKm+oBDV+qmJ4HuVKgQGr6KH6ycPVofxxLLHz5r6diL2LlKL581CwYDImz +B/vCu6+zpXxtgxHqEqGCL3rDBZotaas9Z5qY+b8dxJM+jPCLGBLKz6kCnd0k0x6q +EVyRo9epE1gUAwj8dFJBlAJiRcawtbap0M2s50NFmImDOHjjcQ2ETqVidUlLVUio +a5q8dewpzjhvM2YyG36jMXWi4/DqBs3phKYYyxAx2DYnh6qoQKfq35QVDXjdTrDL +8sr0maOSuVqe/VpyqB99UJ4V0Abeu78zoztMGi7tqBRgHM2F9TkVUjiTx5rEjuO4 +OARky4ctEgorBgEEAZdVAQUBAQdAzlNbe5g9ZRuoJAt1JcsqKoAhRKWuxBbhS1Dw +zCDfNT4DAQgHiH4EGBYKACYWIQRupkKLJP96aW75pIOKYPgoojZS4gUCZMuHLQIb +DAUJEtkyAAAKCRCKYPgoojZS4oCIAQCcPDRM+uagL9ubiHvYvxXo/MHGTcb2sqW6 +TmAEAOiLPAEAhBvjajICx0k/YZxEbBLACqeVZQYx+0wYlq+KFex2bgo= +=HMW7 +-----END PGP PUBLIC KEY BLOCK----- +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFIaWFgBEAD3yahhf9kg8DKupe2vF8Vhva6hnQm07u9seA5/YTirGvKZa1o9 +R9OWy2YXFEvYjcRarwxIrzbDD3+Q09TTFjFmlNu6rV9RXlzLtJDQN4IoY9gfC08g +X6EzpwAzHuBeJrVCTFCgPdBk7s4FwlSXnKr/9mCn0EzDhz++Fma/WxaB8x9J032z +NfDsrjT98vA0cq+wc3a94dj96mFqHz+d+mOHkFYU+OpQeR/3LkFt7MAkko31DuiD +O9IGXVNwCVDBTIUnLjHs4AnJgTP6PtbyfLMCKhe0aUOLDZqhhAy/yxl5Pyn3xq/J +tQWgLjtQR+WJWgEUtjZ9YMC9koVJmjsBkGJTQFNwl8kTeMkvJ/+tsKW/j/fcl5j9 +Jq59WkqVSvvXoMqsHLRORDTesKNbnwEXopB0m8AU9WbW4gMfGLPg8aWRoS2l0KZR +sFtBcPZqopyuMDKYXn+US2NkOAGNwGQf3tG0KjyYI1Vp+rL2+4WGG+gKF0cHJBy2 +IZ14G4asPEuO4f3oxzBLyiVfXylrOL5St8xHQY7yWP5Kl5SlfEmHQN6xImlgrnQS +omPxInJoFH51n07zU5ayCiTQpOg+14eVsaxmbgY3/C1SsmBMCjClJ6+whHHkXtRm +MqonoDoxLJUqmSHktrxCyEhBpPJnQZIKNMFtZhu2YuZZKliYpzCKPbPk+wARAQAB +tCdTYW0gVmFyc2hhdmNoaWsgPG1yc2FtQGNvdXJpZXItbXRhLmNvbT6JAj4EEwEC +ACgFAlIaWFgCGwMFCRLMAwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEGs6 +Yr4nnb8lDU4P/1TFX3yS7yGqaIdTDlc4nuqdc+h0Txq8TC05NpBVWPNVis0aNdrs +S1pPAGoDc6GETO6Tfv6+F6p4ZNZLcWfD32uxvC6vUSq31S+MB0HJTUuqJrs6c87C +HJhA0wqXeOCXFIdA44kLnEFnsLT+8jQLCFyDpw9oIuDkDkaqpx01VQv+kInzXO48 +W2VhJAOwaXipgZ70N93updEKNidlRkosI6u3PFMcV9FkTKzfnQQEmWZgO6BSzLe5 +LrdhIbEGvz9KHvyEOYEnTeHq5NpWPsCB22BUYKSIWF+U2N5jHRpu/yejK2EFfjH/ +8qOEvGTsobzh8+IR9orX8xb9LqkdlzbvZ2/gXVL7pESm9JtipPiXsfEPOmf0hMfJ +pSAIqOJvjIMAFDiOH2ifUY5SRuEFvYLLEO542APV/+iHiZ9fwUd50QG1/OfVWGqn +awxh6CffWJHp903h5VFfUzh9ySM7QtLmk/2138iD7DJDttjQZgKMcp0FLm1tw0P4 +5z1Np8G7wpcQjgjq0FX4iWf55tu71DFucftUOsur2jaZqDrQtw4RPAh+60bsS7l9 +v6uj3ZyT7fzmHCnW5SrXQjSfak6QJhxhqS1/ihCjlctXrBNr7TjW8Pig2CskYx6x +FinHVjvTwV5X+qWSoQ49pzddH9SGe5uvRtisEv5/gAaI4RHN2HOAAykziEYEEBEC +AAYFAlIaWRIACgkQx9p3GYHlUOLKOACfUaUIEs/B8IwjSqyuq795JLeBQFoAn31J +l+yVFi0r8klbU7ZPLOjzrTffuQINBFIaWFgBEAC8JGXVEP/eVbFFl2gDb68Z/7lo +86b/Zpqae3WttshthU6uwQ38UjZN6jIhyGaUCpnRH3jiSRK6+AB0T+LutwY+AZVK +HDj6u/8aw57AeoLMsZ/eq4ogXA18Itiu/5DwYl3Ipz6FMtu0lmhwZ2Q+cO120jWg +rSW4TLgfYmBOBst42ihLFiE4VJvsz6q5Tz5S7fGAi2aT98U/N6TQNtxWCmay8d87 +zxg/S+6f1kyEvLGQ0q0zIjQI3mRrtfgjE3hn9unNLbqeK1KEt6YQ3am2mPRlYTAF +ig6Y1sqyfwF7pcK28idUnCJgoVH+/fsQRNOiaZCKESLno69OYAbJjsmyq+eQ50Qf +ab2LM9fU8mRxCOXeRFBvaTQCW4M+9QzFbiTDDgndZS93Tyc6PNAdvGGF6QPhBSrV +tM8nnSVMckVxiuF9uuVjeKcNLvwc/DWougo2waQYDF0vwTfU08rwa9VnIR77RGSc +N5tZVMDN/mdbfJihVeuzrP6x2dvqhUzwkxnA3cA/Z1S3Wpx0bmB+mTFo2Oyxi9ul +sE0PYW2OXuPvtsQVvtGK0EpWMpt7Dzm+j7c4zFoTKj7Ser91MkWsxDSpnAzOZ1VZ +CAVUmXHQcRgpkAlza6bJiv25fDThbO2PLGycmq0tTEQ4aMnh/PlogGpKkAhJ7oDd +evSK5sLS70B1sKJu4QARAQABiQIlBBgBAgAPBQJSGlhYAhsMBQkSzAMAAAoJEGs6 +Yr4nnb8l+IAP/ju+6SSgYGAOFTRXQDI0fVEJ3yZaudC+LRLXcoteOI7L9s25KSxz ++Vma2QS834kyDvIo+Fm3HBz+L7miBPp0JNspOuvygTesyBx1YvxUa0Q+JPDLPZLQ +oCz6+KbruC31yp89UE5glBceo3/XDsIYreDMEHRbUwxmv0cvTsFeqnqsKYaPLcpi +P4bj1M0FsPU6p7BTeI4732rxolM3KnRckdVv46rYx9aAPgAX+phLpOdSBDkB7vC6 +FKLGGKjpUL61H+CcrvgRxDFU+hlOUw710RxHrNKQKxguqrwq2Rlu6y2A1LHZNTHc +inoWgI6dDSWPKoEgDHMQq4A42lPaM0a936NtfzHlp/MAHSUNZNrwG53ee0Pa1ltl +9F+TFcetliWnP01KRvAGT3Pvd/9Ye38nRNK4n0CMHikBgFUeuG3ZnnTyX4vD5R/k +oO8Z3iVlxY8atDyuF6ntfID710YNXgAna5xB7l3PVPFjwx1j2cqoyAibCeuQ5PQz +Uo9W+DM9NMEaqFCC8buLikJzj0mU9VfEQuDntAuDGvbH0vQfl8w8Rrq8vS2sjXrt +YMyZ3FqO5LpOjWv/3ywmeHZMgt2L0VjXc6p52zbG5QPEvp25mEHNEHbGlFpqlO+S +n13W3olBdLG97hH2N7/P8Gf7mhokBzXmm0M7CPAw3VI5McKysVu35OX0 +=85Hx +-----END PGP PUBLIC KEY BLOCK----- diff --git a/courier-imap.service b/courier-imap.service new file mode 100644 index 0000000..0ecb06d --- /dev/null +++ b/courier-imap.service @@ -0,0 +1,29 @@ +[Unit] +Description=Courier IMAP +Wants=courier-authdaemon.service +After=syslog.target +After=network.target +After=courier-authdaemon.target +After=courier-authdaemon.service + +[Service] +EnvironmentFile=/etc/courier/imapd +Environment="PIDFILE=/run/imapd.pid" "LOCKFILE=/run/imapd.pid.lock" +PIDFile=/run/imapd.pid +LimitNOFILE=65536 +ExecStart=/usr/bin/env - /bin/sh -c " set -a ; \ + . /etc/courier/imapd ; \ + grep IMAPDSTARTTLS=NO /etc/courier/imapd-ssl &>/dev/null || . /etc/courier/imapd-ssl ; \ + IMAP_STARTTLS=$IMAPDSTARTTLS ; export IMAP_STARTTLS ; \ + PROXY_HOSTNAME=$PROXY_HOSTNAME ; \ + TLS_PROTOCOL=$TLS_STARTTLS_PROTOCOL ; \ + /usr/sbin/courierlogger -pid=$PIDFILE -start $LOGGEROPTS \ + /usr/lib/courier-imap/couriertcpd -address=$ADDRESS \ + -maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP $TCPDOPTS \ + $PORT /usr/sbin/imaplogin /usr/sbin/imapd $MAILDIRPATH" +ExecStop=/usr/sbin/courierlogger -pid=$PIDFILE -stop +ExecStopPost=/usr/bin/rm $PIDFILE $LOCKFILE +Restart=always + +[Install] +WantedBy=multi-user.target diff --git a/courier-imap.spec b/courier-imap.spec new file mode 100644 index 0000000..c6c7f30 --- /dev/null +++ b/courier-imap.spec @@ -0,0 +1,234 @@ +# +# spec file for package courier-imap +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%bcond_with valgrind + +Name: courier-imap +Version: 5.2.9 +Release: 0 +Summary: An IMAP and POP3 Server for Maildir MTAs +License: GPL-3.0-or-later +Group: Productivity/Networking/Email/Servers +URL: https://www.courier-mta.org/imap/ +Source0: https://downloads.sourceforge.net/courier/%{name}-%{version}.tar.bz2 +Source1: https://downloads.sourceforge.net/courier/%{name}-%{version}.tar.bz2.sig +Source2: pop3.pamd +Source3: imap.pamd +# Keyring downloaded from https://www.courier-mta.org/KEYS.bin#/%%{name}.keyring +Source4: %{name}.keyring +Source15: courier-imap.service +Source16: courier-imap-ssl.service +Source17: courier-imap-gencert.service +Source18: courier-pop.service +Source19: courier-pop-ssl.service +Source20: courier-pop-gencert.service +Patch0: %{name}-sbindir.patch +Patch2: %{name}-ulimit_conf.patch +### Patch for upstream: +# Apply (open)SUSE specific changes to configuration +Patch4: %{name}-config.patch +BuildRequires: audit-libs +BuildRequires: courier-authlib-devel >= 0.71 +BuildRequires: courier-unicode-devel >= 2.1 +BuildRequires: db-devel +BuildRequires: gcc-c++ +BuildRequires: gdbm-devel +BuildRequires: libstdc++-devel +BuildRequires: ncurses-devel +BuildRequires: pam-devel +BuildRequires: pcre2-devel +BuildRequires: procps +BuildRequires: zlib-devel +BuildRequires: pkgconfig(libidn2) >= 2.0.5 +BuildRequires: pkgconfig(openssl) +BuildRequires: pkgconfig(systemd) +%if %{with valgrind} +BuildRequires: valgrind +%endif +Requires: courier-authlib >= 0.71 +Requires: gdbm +Requires: openssl +Conflicts: cyrus-imapd +Conflicts: imap +Conflicts: qpopper +%{?systemd_requires} + +%description +Courier-IMAP is a fast, scalable, enterprise IMAP server that uses +Maildirs. Many E-mail service providers use Courier-IMAP to easy handle +hundreds of thousands of mail accounts. With its built-in IMAP and POP3 +aggregation proxy, Courier-IMAP has practically infinite horizontal +scalability. In a proxy configuration, a pool of Courier servers service +initial IMAP and POP3 connections from clients. They wait to receive the +client's log in request, look up the server that actually holds this mail +account's mailbox, and establish a proxy connection to the server, all in +a single, seamless process. Mail accounts can be moved between different +servers, to achieve optimum resource usage. + +The only practical limitation on Courier-IMAP is available network and I/O +bandwidth. If you are new to Courier-IMAP, this may sound a bit +intimidating. But you do not need to tackle everything at once. Start by +taking small, easy steps. Your first step will be to set up a small +Courier-IMAP server, using it like any other traditional IMAP service, on +a single server. After you gain experience and become comfortable with +Courier, you can then begin exploring its advanced features. + +This is the same IMAP server that's included in the Courier mail server, +but configured as a standalone IMAP server that can be used with other +mail servers - such as Qmail, Exim, or Postfix - that deliver to maildirs. +If you already have Courier installed, you do not need to download this +version. If you install this version, you must remove it if you later +install the entire Courier server. + +%prep +%autosetup -p0 + +# For %%doc macro +mv libs/maildir/README.sharedfolders{.txt,} +mv libs/maildir/README.maildirquota{.txt,} + +%build +%configure \ + --with-notice=unicode \ + --libexecdir=%{_prefix}/lib/%{name} \ + --datadir=%{_datadir}/%{name} \ + --sysconfdir=%{_sysconfdir}/courier \ + --sharedstatedir=%{_sharedstatedir}/%{name} \ + --with-piddir=%{_rundir} \ + --disable-static \ + --disable-root-check \ + --enable-unicode \ + --with-notice=unicode \ + --with-authdaemonvar=%{_rundir}/courier-authlib \ + --with-certdb=%{_sysconfdir}/ssl/certs \ + --with-certsdir=%{_sysconfdir}/ssl/private \ +%if %{without valgrind} + --enable-workarounds-for-imap-client-bugs +%endif + +%make_build + +%install +%make_install +# Move daemons into sbin +mv %{buildroot}%{_bindir}/{couriertls,imapd,pop3d} %{buildroot}%{_sbindir}/ +# Rename imapd.8 to courier-imapd.8 +mv %{buildroot}%{_mandir}/man8/imapd.8 %{buildroot}%{_mandir}/man8/%{name}d.8 +# Install PAM config files +%if 0%{?suse_version} > 1500 +mkdir -p %{buildroot}%{_pam_vendordir} +install -D -m 644 %{S:2} %{buildroot}%{_pam_vendordir}/pop3 +install -D -m 644 %{S:3} %{buildroot}%{_pam_vendordir}/imap +%else +install -D -m 644 %{S:2} %{buildroot}%{_sysconfdir}/pam.d/pop3 +install -D -m 644 %{S:3} %{buildroot}%{_sysconfdir}/pam.d/imap +%endif +# Install init scripts +for i in imap imap-ssl imap-gencert pop pop-ssl pop-gencert; do + ln -s -f service %{buildroot}%{_sbindir}/rccourier-$i +done +# Install service files +install -d -m 0755 %{buildroot}%{_unitdir} +install -m 0644 %{S:15} %{S:16} %{S:17} %{S:18} %{S:19} %{S:20} %{buildroot}%{_unitdir} +# Remove original init scripts, will not work longer +rm %{buildroot}%{_prefix}/lib/%{name}/imapd.rc +rm %{buildroot}%{_prefix}/lib/%{name}/imapd-ssl.rc +rm %{buildroot}%{_prefix}/lib/%{name}/pop3d.rc +rm %{buildroot}%{_prefix}/lib/%{name}/pop3d-ssl.rc +# +install -D -m 0755 sysconftool %{buildroot}%{_datadir}/%{name}/sysconftool +chmod 755 %{buildroot}%{_datadir}/%{name}/sysconftool +cat >%{buildroot}%{_datadir}/%{name}/configlist < 1500 +# Prepare for migration to /usr/lib; save any old .rpmsave +for i in pam.d/pop3 pam.d/imap ; do + test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||: +done +%endif + +%preun +%service_del_preun courier-imap-gencert.service courier-imap-ssl.service courier-imap.service +%service_del_preun courier-pop-gencert.service courier-pop-ssl.service courier-pop.service + +%post +%{_datadir}/%{name}/sysconftool `cat %{_datadir}/%{name}/configlist` >/dev/null +%service_add_post courier-imap-gencert.service courier-imap-ssl.service courier-imap.service +%service_add_post courier-pop-gencert.service courier-pop-ssl.service courier-pop.service + +%postun +%service_del_postun courier-imap-gencert.service courier-imap-ssl.service courier-imap.service +%service_del_postun courier-pop-gencert.service courier-pop-ssl.service courier-pop.service + +%if 0%{?suse_version} > 1500 +%posttrans +# Migration to /usr/lib, restore just created .rpmsave +for i in pam.d/pop3 pam.d/imap ; do + test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||: +done +%endif + +%files +%defattr(-,root,root,755) +%license COPYING* +%doc AUTHORS README +%doc libs/imap/ChangeLog libs/imap/BUGS libs/imap/README.proxy +%doc libs/maildir/README.sharedfolders libs/maildir/README.maildirquota +%if 0%{?suse_version} > 1500 +%{_pam_vendordir}/imap +%{_pam_vendordir}/pop3 +%else +%config %attr(644,root,root) %{_sysconfdir}/pam.d/imap +%config %attr(644,root,root) %{_sysconfdir}/pam.d/pop3 +%endif +%dir %{_sysconfdir}/courier +%dir %{_sysconfdir}/courier/imapaccess +%dir %{_sysconfdir}/courier/shared +%dir %{_sysconfdir}/courier/shared.tmp +%config %attr(600,root,root) %{_sysconfdir}/courier/imapd* +%config %attr(600,root,root) %{_sysconfdir}/courier/pop3* +%config %{_sysconfdir}/courier/quotawarnmsg.example +%dir %{_prefix}/lib/%{name} +%{_prefix}/lib/%{name}/makedatprog +%{_prefix}/lib/%{name}/couriertcpd +%dir %{_datadir}/%{name}/ +%{_datadir}/%{name}/* +%{_bindir}/* +%{_sbindir}/* +%{_mandir}/man?/* +%{_unitdir}/courier-*.service +%dir %attr(750,root,root) %{_localstatedir}/cache/%{name}/ +%ghost %{_localstatedir}/cache/%{name}/sslpop3cache +%ghost %{_localstatedir}/cache/%{name}/sslimapcache + +%changelog diff --git a/courier-pop-gencert.service b/courier-pop-gencert.service new file mode 100644 index 0000000..e216c83 --- /dev/null +++ b/courier-pop-gencert.service @@ -0,0 +1,8 @@ +[Unit] +Description=Courier POP3 (SSL) Cert Generation +ConditionPathExists=!/etc/ssl/private/pop3d.pem + +[Service] +Type=oneshot +ExecStart=/usr/sbin/mkpop3dcert +RemainAfterExit=yes diff --git a/courier-pop-ssl.service b/courier-pop-ssl.service new file mode 100644 index 0000000..96a2d8e --- /dev/null +++ b/courier-pop-ssl.service @@ -0,0 +1,32 @@ +[Unit] +Description=Courier POP3 (SSL) +Wants=courier-authdaemon.service +Wants=courier-pop-gencert.service +After=syslog.target +After=network.target +After=courier-authdaemon.target +After=courier-authdaemon.service +After=courier-pop-gencert.service + +[Service] +EnvironmentFile=/etc/courier/pop3d +EnvironmentFile=/etc/courier/pop3d-ssl +Environment="SSLPIDFILE=/run/pop3d-ssl.pid" "LOCKFILE=/run/pop3d-ssl.pid.lock" +PIDFile=/run/pop3d-ssl.pid +LimitNOFILE=65536 +ExecStart=/usr/bin/env - /bin/sh -c " set -a ; \ + . /etc/courier/pop3d ; \ + . /etc/courier/pop3d-ssl ; \ + POP3_TLS=1; POP3_STARTTLS=NO; POP3_TLS_REQUIRED=0; \ + PROXY_HOSTNAME=$PROXY_HOSTNAME ; \ + /usr/sbin/courierlogger -pid=$SSLPIDFILE -start $SSLLOGGEROPTS \ + /usr/lib/courier-imap/couriertcpd -address=$SSLADDRESS \ + -maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP $TCPDOPTS \ + $SSLPORT $COURIERTLS -server -tcpd /usr/sbin/pop3login \ + /usr/sbin/pop3d $MAILDIRPATH" +ExecStop=/usr/sbin/courierlogger -pid=$SSLPIDFILE -stop +ExecStopPost=/usr/bin/rm $SSLPIDFILE $LOCKFILE +Restart=always + +[Install] +WantedBy=multi-user.target diff --git a/courier-pop.service b/courier-pop.service new file mode 100644 index 0000000..c3d7759 --- /dev/null +++ b/courier-pop.service @@ -0,0 +1,26 @@ +[Unit] +Description=Courier POP3 +Wants=courier-authdaemon.service +After=syslog.target +After=network.target +After=courier-authdaemon.target +After=courier-authdaemon.service + +[Service] +EnvironmentFile=/etc/courier/pop3d +Environment="PIDFILE=/run/pop3d.pid" "LOCKFILE=/run/pop3d.pid.lock" +PIDFile=/run/pop3d.pid +LimitNOFILE=65536 +ExecStart=/usr/bin/env - /bin/sh -c " set -a ; \ + . /etc/courier/pop3d ; \ + PROXY_HOSTNAME=$PROXY_HOSTNAME ; \ + /usr/sbin/courierlogger -pid=$PIDFILE -start $LOGGEROPTS \ + /usr/lib/courier-imap/couriertcpd -address=$ADDRESS \ + -maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP $TCPDOPTS \ + $PORT /usr/sbin/pop3login /usr/sbin/pop3d $MAILDIRPATH" +ExecStop=/usr/sbin/courierlogger -pid=$PIDFILE -stop +ExecStopPost=/usr/bin/rm $PIDFILE $LOCKFILE +Restart=always + +[Install] +WantedBy=multi-user.target diff --git a/imap.pamd b/imap.pamd new file mode 100644 index 0000000..352eb97 --- /dev/null +++ b/imap.pamd @@ -0,0 +1,5 @@ +#%PAM-1.0 +auth include common-auth +account include common-account +password include common-password +session include common-session diff --git a/pop3.pamd b/pop3.pamd new file mode 100644 index 0000000..352eb97 --- /dev/null +++ b/pop3.pamd @@ -0,0 +1,5 @@ +#%PAM-1.0 +auth include common-auth +account include common-account +password include common-password +session include common-session