SHA256
1
0
forked from pool/postfix
postfix/postfix-no-md5.patch
Michael Ströder 505c9a6190 Accepting request 896790 from home:darix:playground
This is work in progress:

Do not accept yet

How do we plan to handle the section from the RELEASE_NOTES about the internal process updates?

https://de.postfix.org/ftpmirror/official/postfix-3.6.0.RELEASE_NOTES

do we just hope that the restart will be fast enough?

OBS-URL: https://build.opensuse.org/request/show/896790
OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=413
2021-06-02 10:12:35 +00:00

27 lines
1.2 KiB
Diff

Index: src/global/mail_params.h
===================================================================
--- src/global/mail_params.h.orig
+++ src/global/mail_params.h
@@ -1381,7 +1381,7 @@ extern char *var_smtpd_tls_mand_excl;
#define VAR_SMTPD_TLS_FPT_DGST "smtpd_tls_fingerprint_digest"
#define DEF_SMTPD_TLS_FPT_DGST "${{$compatibility_level} <level {3.6} ? " \
- "{md5} : {sha256}}"
+ "{sha1} : {sha256}}"
extern char *var_smtpd_tls_fpt_dgst;
#define VAR_SMTPD_TLS_512_FILE "smtpd_tls_dh512_param_file"
@@ -1543,10 +1543,10 @@ extern char *var_smtp_tls_mand_excl;
#define VAR_SMTP_TLS_FPT_DGST "smtp_tls_fingerprint_digest"
#define DEF_SMTP_TLS_FPT_DGST "${{$compatibility_level} <level {3.6} ? " \
- "{md5} : {sha256}}"
+ "{sha1} : {sha256}}"
#define VAR_LMTP_TLS_FPT_DGST "lmtp_tls_fingerprint_digest"
#define DEF_LMTP_TLS_FPT_DGST "${{$compatibility_level} <level {3.6} ? " \
- "{md5} : {sha256}}"
+ "{sha1} : {sha256}}"
extern char *var_smtp_tls_fpt_dgst;
#define VAR_SMTP_TLS_TAFILE "smtp_tls_trust_anchor_file"