Postfix/TLS uses properties that are only available starting with version 0.9.5 of the OpenSSL library. 0.9.5a and 0.9.6[a-g] have proven stability over several months. The release 0.9.6h contains several additional bugfixes, some of which are security related. OpenSSL 0.9.6h is the latest release and strongly recommended.
pfixtls.diff
" in the main
directory of the patch kit. It is a unified diff.
To apply the patches, go to the directory one level below the
original postfix source tree (you should see
"postfix-xxxxxxx
" or "snapshot-xxxxxxx
"
when doing an "ls -al
"
at this point. The patch is then applied with:
patch -p0 < path-to/pfixtls.diffIf you experience problems during the patch process (e.g. with the HP-UX 10.20 included patch), you might need to update your patch program, e.g. to an actual GNU-patch.
If you need to apply the patchkit to a different version of patchlevel of postfix, you might try the following:
cd postfix-directory ; patch -p1 < path-to/pfixtls.diffSince the patch is in unified form, it might also apply to a mildly changed source, as long as no conflicts appear.
HAS_SSL
. Your command for configuration
might then be:
make makefiles CCARGS="-DHAS_SSL -I/usr/local/ssl/include" AUXLIBS="-L/usr/local/ssl/lib -lssl -lcrypto"You might need additional customization e.g. for using Berkeley-DB as listed in the postfix INSTALL instructions. You can then continue in the usual way with:
makeand then follow the instructions in the postfix INSTALL file.