forked from pool/postfix
ec92bf34f4
- postfix-no-md5.patch: replace fingerprint defaults by sha1. - %verifyscript is a new section, move it out of the %ifdef so the fillups are run afterwards. OBS-URL: https://build.opensuse.org/request/show/320339 OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=224
26 lines
1018 B
Diff
26 lines
1018 B
Diff
Index: postfix-2.11.0/src/global/mail_params.h
|
|
===================================================================
|
|
--- postfix-2.11.0.orig/src/global/mail_params.h
|
|
+++ postfix-2.11.0/src/global/mail_params.h
|
|
@@ -1300,7 +1300,7 @@ extern char *var_smtpd_tls_excl_ciph;
|
|
extern char *var_smtpd_tls_mand_excl;
|
|
|
|
#define VAR_SMTPD_TLS_FPT_DGST "smtpd_tls_fingerprint_digest"
|
|
-#define DEF_SMTPD_TLS_FPT_DGST "md5"
|
|
+#define DEF_SMTPD_TLS_FPT_DGST "sha1"
|
|
extern char *var_smtpd_tls_fpt_dgst;
|
|
|
|
#define VAR_SMTPD_TLS_512_FILE "smtpd_tls_dh512_param_file"
|
|
@@ -1449,9 +1449,9 @@ extern char *var_smtp_tls_excl_ciph;
|
|
extern char *var_smtp_tls_mand_excl;
|
|
|
|
#define VAR_SMTP_TLS_FPT_DGST "smtp_tls_fingerprint_digest"
|
|
-#define DEF_SMTP_TLS_FPT_DGST "md5"
|
|
+#define DEF_SMTP_TLS_FPT_DGST "sha1"
|
|
#define VAR_LMTP_TLS_FPT_DGST "lmtp_tls_fingerprint_digest"
|
|
-#define DEF_LMTP_TLS_FPT_DGST "md5"
|
|
+#define DEF_LMTP_TLS_FPT_DGST "sha1"
|
|
extern char *var_smtp_tls_fpt_dgst;
|
|
|
|
#define VAR_SMTP_TLS_TAFILE "smtp_tls_trust_anchor_file"
|