{"id":12358,"date":"2021-07-02T06:52:13","date_gmt":"2021-07-02T06:52:13","guid":{"rendered":"http:\/\/blog.bachi.net\/?p=12358"},"modified":"2021-08-07T18:14:39","modified_gmt":"2021-08-07T18:14:39","slug":"qmail-mit-tls-1-3","status":"publish","type":"post","link":"https:\/\/blog.bachi.net\/?p=12358","title":{"rendered":"qmail mit TLS 1.3"},"content":{"rendered":"

qmail variants<\/h3>\n

s\/qmail<\/a>
\nqmail-ldap<\/a>, by Andr\u00e9 Oppermann (LinkedIn<\/a>, Xing<\/a>)
\nLife With qmail-ldap<\/a><\/p>\n

freshports.org<\/h3>\n

qmail<\/a>
\nqmail-tls<\/a>: Secure, reliable, and fast MTA for UNIX systems with TLS support<\/p>\n

Repository<\/h3>\n

https:\/\/cgit.freebsd.org\/ports\/tree\/mail\/qmail?h=release\/12.2.0<\/a><\/p>\n

FreeBSD 10.2<\/h3>\n\n\n\n\n\n
ZHAW -> tE-Clan Server ==> works<\/td>\n<\/tr>\n
\"\"<\/a><\/td>\n<\/tr>\n
tE-Clan Server -> ZHAW ==> DOESN’T work!!<\/td>\n<\/tr>\n
\"\"<\/a><\/td>\n<\/tr>\n<\/table>\n
\r\n$ pkg info netqmail-tls\r\nnetqmail-tls-1.06.20110119_1\r\nName           : netqmail-tls\r\nVersion        : 1.06.20110119_1\r\nInstalled on   : Fri Dec 11 10:59:23 2015 CET\r\nOrigin         : mail\/qmail-tls\r\nArchitecture   : freebsd:10:x86:64\r\nPrefix         : \/var\/qmail\r\nCategories     : mail\r\nLicenses       :\r\nMaintainer     : erdgeist@erdgeist.org\r\nWWW            : http:\/\/inoa.net\/qmail-tls\/\r\nComment        : Secure, reliable, and fast MTA for UNIX systems with TLS support\r\nOptions        :\r\n        BIG_CONCURRENCY_PATCH: off\r\n        BIG_TODO_PATCH : on\r\n        BLOCKEXEC_PATCH: on\r\n        DISCBOUNCES_PATCH: off\r\n        DNS_CNAME      : on\r\n        DOCS           : on\r\n        EXTTODO_PATCH  : off\r\n        LOCALTIME_PATCH: off\r\n        MAILDIRQUOTA_PATCH: off\r\n        OUTGOINGIP_PATCH: on\r\n        QEXTRA         : off\r\n        QMTPC_PATCH    : off\r\n        RCDLINK        : off\r\n        SMTP_AUTH_PATCH: off\r\n        SPF_PATCH      : off\r\n        TLS_DEBUG      : off\r\nAnnotations    :\r\nFlat size      : 1.06MiB\r\nDescription    :\r\nWhat is is: [excerpt taken from tls patch]\r\n\r\nFrederik Vermeulen <qmail-tls at inoa.net> 20021228\r\nhttp:\/\/inoa.net\/qmail\/qmail-1.03-tls.patch\r\n\r\nThis patch implements RFC2487 in qmail. This means you can\r\nget SSL or TLS encrypted and authenticated SMTP between\r\nthe MTAs and between MTA and an MUA like Netscape4.5 TM.\r\nThe code is considered experimental.\r\n\r\nWWW: http:\/\/inoa.net\/qmail-tls\/\r\n\r\n<\/pre>\n
\r\n# tail \/var\/log\/qmail\/current | tai64nlocal\r\n2021-07-09 16:13:31.006863500 status: local 1\/10 remote 0\/20\r\n2021-07-09 16:13:31.020170500 delivery 47043: success: did_0+0+1\/\r\n2021-07-09 16:13:31.020288500 status: local 0\/10 remote 0\/20\r\n2021-07-09 16:13:31.020361500 end msg 963489\r\n\r\n2021-07-09 16:37:34.013898500 new msg 963470\r\n2021-07-09 16:37:34.013922500 info msg 963470: bytes 2686 from <XXX> qp 17787 uid 89\r\n2021-07-09 16:37:34.398681500 starting delivery 47044: msg 963470 to remote XXX@hotmail.com\r\n2021-07-09 16:37:34.398686500 status: local 0\/10 remote 1\/20\r\n2021-07-09 16:37:35.411841500 delivery 47044: deferral: TLS_connect_failed;_connected_to_104.47.73.161.\/\r\n2021-07-09 16:37:35.411846500 status: local 0\/10 remote 0\/20\r\n\r\n2021-07-09 16:44:15.431323500 starting delivery 47045: msg 963470 to remote XXX@hotmail.com\r\n2021-07-09 16:44:15.431328500 status: local 0\/10 remote 1\/20\r\n2021-07-09 16:44:15.841424500 delivery 47045: deferral: TLS_connect_failed;_connected_to_104.47.17.161.\/\r\n2021-07-09 16:44:15.841460500 status: local 0\/10 remote 0\/20\r\n\r\n2021-07-09 17:04:15.098384500 starting delivery 47047: msg 963470 to remote XXX@hotmail.com\r\n2021-07-09 17:04:15.098390500 status: local 0\/10 remote 1\/20\r\n2021-07-09 17:04:15.289859500 delivery 47047: deferral: TLS_connect_failed;_connected_to_104.47.10.33.\/\r\n2021-07-09 17:04:15.289889500 status: local 0\/10 remote 0\/20\r\n<\/pre>\n
\r\n[root@ns2 \/usr\/ports\/mail\/qmail-tls]# make install\r\n\r\nYou may use the following build options:\r\n\r\nWITH_BIG_CONCURRENCY_PATCH_CONCURRENCY_LIMIT=NUMBER\r\n                                (default NUMBER=)\r\n                                set this to a value reasonable for\r\n                                your system if you use the patch\r\n\r\n===>  netqmail-tls-1.06.20110119_1 has known vulnerabilities:\r\nnetqmail-tls-1.06.20110119_1 is vulnerable:\r\nqmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests\r\nCVE: CVE-2005-1515\r\nCVE: CVE-2005-1514\r\nCVE: CVE-2005-1513\r\nWWW: https:\/\/vuxml.FreeBSD.org\/freebsd\/b495af21-9e10-11ea-9e83-0cc47ac16c9d.html\r\n\r\n1 problem(s) in the installed packages found.\r\n=> Please update your ports tree and try again.\r\n=> Note: Vulnerable ports are marked as such even if there is no update available.\r\n=> If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes'\r\n*** Error code 1\r\n\r\nStop.\r\nmake[1]: stopped in \/usr\/ports\/mail\/qmail-tls\r\n*** Error code 1\r\n\r\nStop.\r\nmake: stopped in \/usr\/ports\/mail\/qmail-tls\r\n<\/pre>\n
\r\n.if defined(SLAVE_LDAP)\r\nPATCH_SITES+=   http:\/\/www.nrg4u.com\/qmail\/:ldap\r\nPATCHFILES+=    qmail-ldap-1.03-${LDAP_PATCH_DATE}.patch.gz:ldap\r\n.elif defined(SLAVE_MYSQL)\r\nPATCH_SITES+=   http:\/\/iain.cx\/unix\/qmail\/download\/:mysql\r\nPATCHFILES+=    netqmail-mysql-${MYSQL_PATCH_VERSION}.patch:mysql\r\n.elif defined(SLAVE_TLS)\r\nPATCH_SITES+=   http:\/\/inoa.net\/qmail-tls\/:tls\r\nTLS_PATCH_NAME= ${QMAIL_PORTNAME}-${QMAIL_VERSION}-tls-${TLS_PATCH_DATE}.patch\r\nPATCHFILES+=    ${TLS_PATCH_NAME}:tls\r\n.endif\r\n<\/pre>\n
\r\nPORTNAME=       qmail\r\nPORTVERSION=    ${QMAIL_VERSION}.${TLS_PATCH_DATE}\r\n\r\nPKGNAMESUFFIX=  -tls\r\n\r\nSLAVE_TLS=      yes\r\nTLS_PATCH_DATE= 20110119\r\n<\/pre>\n
\r\n# where pkg_add records its dirty deeds.\r\nPKG_DBDIR?=\t\t\/var\/db\/pkg\r\n\r\nAUDITFILE?=\t\t${PKG_DBDIR}\/vuln.xml\r\n\r\ncheck-vulnerable:\r\n.if !defined(DISABLE_VULNERABILITIES) && !defined(PACKAGE_BUILDING)\r\n\t[...]\r\n\t\t\t${ECHO_MSG} "===>  ${PKGNAME} has known vulnerabilities:"; \\\r\n\t\t\t${ECHO_MSG} "$$vlist"; \\\r\n\t\t\t${ECHO_MSG} "=> Please update your ports tree and try again."; \\\r\n\t\t\t${ECHO_MSG} "=> Note: Vulnerable ports are marked as such even if there is no update available."; \\\r\n\t\t\t${ECHO_MSG} "=> If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes'"; \\\r\n<\/pre>\n
\r\n    <topic>qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests<\/topic>\r\n        <name>netqmail<\/name>\r\n        <name>netqmail-tls<\/name>\r\n        <name>netqmail-mysql<\/name>\r\n<\/pre>\n
Chapter 4. Slow Porting: 4.4. Patching<\/a><\/p>\n
    \n
  1. […]<\/li>\n
  2. […]<\/li>\n
  3. The patch target is run. First, any patches defined in PATCHFILES are applied. Second, if any patch files named patch-* are found in PATCHDIR (defaults to the files subdirectory), they are applied at this time in alphabetical order.<\/li>\n
  4. […]<\/li>\n<\/ol>\n
    \r\n===>   netqmail-tls-1.06.20200107_4 depends on file: \/usr\/local\/sbin\/pkg - found\r\n=> qmail-smtpd-auth-0.31.tar.gz doesn't seem to exist in \/usr\/ports\/distfiles\/qmail.\r\n=> Attempting to fetch http:\/\/tomclegg.net\/qmail\/qmail-smtpd-auth-0.31.tar.gz\r\nqmail-smtpd-auth-0.31.tar.gz                  100% of 8798  B   27 MBps 00m00s\r\n=> qmail-smtpd-auth-close3.patch doesn't seem to exist in \/usr\/ports\/distfiles\/qmail.\r\n=> Attempting to fetch http:\/\/tomclegg.net\/qmail\/qmail-smtpd-auth-close3.patch\r\nqmail-smtpd-auth-close3.patch                 100% of  520  B 2791 kBps 00m00s\r\n=> auth.patch.diff-tls-20110119 doesn't seem to exist in \/usr\/ports\/distfiles\/qmail.\r\n=> Attempting to fetch http:\/\/tomclegg.net\/qmail\/auth.patch.diff-tls-20110119\r\nfetch: http:\/\/tomclegg.net\/qmail\/auth.patch.diff-tls-20110119: Not Found\r\n=> Attempting to fetch http:\/\/distcache.FreeBSD.org\/local-distfiles\/bdrewery\/qmail\/auth.patch.diff-tls-20110119\r\nauth.patch.diff-tls-20110119                  100% of 3170  B   18 MBps 00m00s\r\n=> netqmail-1.06-tls-20200107.patch doesn't seem to exist in \/usr\/ports\/distfiles\/qmail.\r\n=> Attempting to fetch http:\/\/inoa.net\/qmail-tls\/netqmail-1.06-tls-20200107.patch\r\nnetqmail-1.06-tls-20200107.patch              100% of   50 kB 3567 kBps 00m00s\r\n===> Fetching all distfiles required by netqmail-tls-1.06.20200107_4 for building\r\n===>  Extracting for netqmail-tls-1.06.20200107_4\r\n=> SHA256 Checksum OK for qmail\/netqmail-1.06.tar.gz.\r\n=> SHA256 Checksum OK for qmail\/qmail-smtpd-auth-0.31.tar.gz.\r\n=> SHA256 Checksum OK for qmail\/qmail-smtpd-auth-close3.patch.\r\n=> SHA256 Checksum OK for qmail\/auth.patch.diff-tls-20110119.\r\n=> SHA256 Checksum OK for qmail\/qmail-103.patch.\r\n=> No SHA256 checksum recorded for qmail\/netqmail-1.06-tls-20200107.patch.\r\n=> No suitable checksum found for qmail\/netqmail-1.06-tls-20200107.patch.\r\n=> SHA256 Checksum OK for qmail\/qmail-block-executables.patch.\r\n=> SHA256 Checksum OK for qmail\/big-todo.103.patch.\r\n=> SHA256 Checksum OK for qmail\/outgoingip.patch.\r\n*** Error code 1\r\n\r\nStop.\r\nmake[1]: stopped in \/usr\/ports\/mail\/qmail-tls\r\n*** Error code 1\r\n\r\nStop.\r\nmake: stopped in \/usr\/ports\/mail\/qmail-tls\r\n<\/pre>\n
    \r\n# cd \/usr\/ports\/mail\/qmail-tls\r\n\r\n# make makesum\r\n===>  Found saved configuration for netqmail-tls-1.06.20200107_4\r\n===>   netqmail-tls-1.06.20200107_4 depends on file: \/usr\/local\/sbin\/pkg - found\r\n===> Fetching all distfiles required by netqmail-tls-1.06.20200107_4 for building\r\n\r\n# make\r\n===>  Found saved configuration for netqmail-tls-1.06.20200107_4\r\n===>   netqmail-tls-1.06.20200107_4 depends on file: \/usr\/local\/sbin\/pkg - found\r\n===> Fetching all distfiles required by netqmail-tls-1.06.20200107_4 for building\r\n===>  Extracting for netqmail-tls-1.06.20200107_4\r\n=> SHA256 Checksum OK for qmail\/netqmail-1.06.tar.gz.\r\n=> SHA256 Checksum OK for qmail\/qmail-smtpd-auth-0.31.tar.gz.\r\n=> SHA256 Checksum OK for qmail\/qmail-smtpd-auth-close3.patch.\r\n=> SHA256 Checksum OK for qmail\/auth.patch.diff-tls-20110119.\r\n=> SHA256 Checksum OK for qmail\/qmail-103.patch.\r\n=> SHA256 Checksum OK for qmail\/netqmail-1.06-tls-20200107.patch.\r\n=> SHA256 Checksum OK for qmail\/qmail-block-executables.patch.\r\n=> SHA256 Checksum OK for qmail\/big-todo.103.patch.\r\n=> SHA256 Checksum OK for qmail\/outgoingip.patch.\r\n===>  Patching for netqmail-tls-1.06.20200107_4\r\n===>  Applying distribution patches for netqmail-tls-1.06.20200107_4\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-amd64\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-utmpx\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-dns-cname\r\n===>  Applying FreeBSD patches for netqmail-tls-1.06.20200107_4\r\n[...]\r\n\r\n\r\n# ps auxd\r\n- \/usr\/local\/bin\/svscan \/var\/service\r\n|-- supervise pop3d\r\n| `-- \/usr\/local\/bin\/tcpserver -vDHR -l0 -c200 -xtcp.cdb -- 0 110 \/var\/qmail\/bin\/qmail-popup ns2.te-clan.ch \/usr\/local\/vpopmail\/bin\/vchkpw \/var\/qmail\/bin\/qmail-pop3d Maildir\r\n|-- supervise log\r\n| `-- multilog t .\/main\r\n|-- supervise smtpd\r\n| `-- \/usr\/local\/bin\/tcpserver -vDUHR -lns2.te-clan.ch -c200 -xtcp.cdb -- 0 25 \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   |-- \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   | `-- \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   |-- \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   | `-- \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   |-- \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   | `-- \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   |-- \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   | `-- \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|   `-- \/usr\/local\/bin\/greylite \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|     `-- \/var\/qmail\/bin\/qmail-smtpd \/usr\/local\/vpopmail\/bin\/vchkpw \/bin\/true\r\n|-- supervise log\r\n| `-- multilog t .\/main\r\n|-- supervise qmail\r\n| `-- qmail-send\r\n|   |-- \/usr\/local\/bin\/multilog t \/var\/log\/qmail qmaill\r\n|   |-- qmail-lspawn .\/Maildir\/\r\n|   |-- qmail-rspawn\r\n|   `-- qmail-clean\r\n`-- supervise log\r\n  `-- multilog t .\/main\r\n\r\n\r\n# find work -name qmail-remote\r\nwork\/netqmail-1.06\/qmail-remote\r\nwork\/stage\/var\/qmail\/bin\/qmail-remote\r\n\r\n# \/usr\/local\/etc\/rc.d\/svscan stop\r\nStopping svscan.\r\nWaiting for PIDS: 731.\r\n\r\n# cp \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/bin\/qmail-remote \/var\/qmail\/bin\/qmail-remote\r\n\r\n# \/usr\/local\/etc\/rc.d\/svscan start\r\n<\/pre>\n
    qmail mit TLS<\/h3>\n
    smtp-auth + qmail-tls + forcetls patch for qmail<\/a>, May 8, 2020
    \n    Patching qmail<\/a>, June 19, 2021
    \n    Installing and configuring vpopmail<\/a>, April 18, 2021
    \n    Installing Dovecot and sieve on a vpopmail + qmail server<\/a>, June 20, 2021<\/p>\n
    Was ist TLS<\/h3>\n
    SMTP and Transport Layer Security (TLS) [Tutorial]<\/a><\/p>\n
    <\/h3>\n
    Microsoft unterst\u00fctzt TLS 1.0 nicht mehr!<\/h3>\n
    TLS connect failed<\/a>
    \n    SSL\/TLS connection issue troubleshooting test tools<\/a>
    \n    Can’t establish a TLS connection to a remote mail server in Exchange Online or Exchange Server<\/a>
    \n    TLS negotiating failed<\/a>
    \n    Office 365 to enforce TLS 1.2 per October 15, 2020<\/a>
    \n    Checking security protocols and ciphers on your Exchange servers<\/a>
    \n    Rehash: How to Fix the SSL\/TLS Handshake Failed Error<\/a><\/p>\n
    SSL\/TLS connection issue troubleshooting guide<\/a>
    \n    SSL\/TLS connection issue troubleshooting test tools<\/a><\/p>\n
    SMTP MTA STS<\/h3>\n
    SMTP MTA STS (Strict Transport Security)<\/a>
    \n    MTA-STS gestaltet Mail-Versand und -Empfang sicherer<\/a>
    \n    STARTTLS: MTA-STS<\/a><\/p>\n
    OpenSSL<\/h3>\n
    E-Mail-Verschl\u00fcsselung austesten<\/a>
    \n    When was TLS 1.2 support added to OpenSSL?<\/a><\/p>\n
    \r\n# openssl version\r\nOpenSSL 1.0.1p-freebsd 9 Jul 2015\r\n<\/pre>\n
    SSL\/TLS Client<\/a><\/p>\n
    \r\nFrom ns3.te-clan.ch\r\n$ openssl s_client -host mail.te-clan.ch -port 25 -starttls smtp\r\nCONNECTED(00000003)\r\nehlo test\r\ndepth=0 C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\nverify error:num=18:self signed certificate\r\nverify return:1\r\ndepth=0 C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\nverify return:1\r\n---\r\nCertificate chain\r\n 0 s:C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\n   i:C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\n---\r\nServer certificate\r\n-----BEGIN CERTIFICATE-----\r\n[...]\r\n-----END CERTIFICATE-----\r\nsubject=C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\nissuer=C = CH, ST = ZH, L = Winterthur, O = tE-clan Server, CN = Andreas Bachmann, emailAddress = bachi@te-clan.ch\r\n\r\n---\r\nNo client certificate CA names sent\r\nPeer signing digest: SHA256\r\nPeer signature type: RSA\r\nServer Temp Key: DH, 1024 bits\r\n---\r\nSSL handshake has read 1600 bytes and written 542 bytes\r\nVerification error: self signed certificate\r\n---\r\nNew, TLSv1.2, Cipher is DHE-RSA-AES256-GCM-SHA384\r\nServer public key is 1024 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nNo ALPN negotiated\r\nSSL-Session:\r\n    Protocol  : TLSv1.2\r\n    Cipher    : DHE-RSA-AES256-GCM-SHA384\r\n    Session-ID: [...]\r\n    Session-ID-ctx:\r\n    Master-Key: [...]\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    TLS session ticket lifetime hint: 300 (seconds)\r\n    TLS session ticket:\r\n    0000 - 0b f4 09 ef 02 07 df bc-b9 fa bd d0 f6 21 af 69   .............!.i\r\n    0010 - [...]\r\n    00a0 - ff 5d 6f 73 8d 1b 75 59-bf dd 9b a6 d8 b2 01 71   .]os..uY.......q\r\n    Start Time: 1625840075\r\n    Timeout   : 7200 (sec)\r\n    Verify return code: 18 (self signed certificate)\r\n    Extended master secret: no\r\n---\r\n250 8BITMIME\r\n250-ns2.te-clan.ch250-AUTH LOGIN PLAIN CRAM-MD5\r\n250-PIPELINING\r\n250 8BITMIME\r\nread:errno=0\r\n<\/pre>\n
    \r\nFrom ns3.te-clan.ch\r\n$ openssl s_client -host 104.47.74.33 -port 25 -starttls smtp\r\nCONNECTED(00000003)\r\ndepth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA\r\nverify return:1\r\ndepth=1 C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1\r\nverify return:1\r\ndepth=0 C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, CN = mail.protection.outlook.com\r\nverify return:1\r\n---\r\nCertificate chain\r\n 0 s:C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, CN = mail.protection.outlook.com\r\n   i:C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1\r\n 1 s:C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1\r\n   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA\r\n---\r\nServer certificate\r\n-----BEGIN CERTIFICATE-----\r\n[...]\r\n-----END CERTIFICATE-----\r\nsubject=C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, CN = mail.protection.outlook.com\r\n\r\nissuer=C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1\r\n\r\n---\r\nNo client certificate CA names sent\r\nClient Certificate Types: RSA sign, DSA sign, ECDSA sign\r\nRequested Signature Algorithms: RSA+SHA256:RSA+SHA384:RSA+SHA1:ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA1:DSA+SHA1:RSA+SHA512:ECDSA+SHA512\r\nShared Requested Signature Algorithms: RSA+SHA256:RSA+SHA384:RSA+SHA1:ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA1:DSA+SHA1:RSA+SHA512:ECDSA+SHA512\r\nPeer signing digest: SHA256\r\nPeer signature type: RSA\r\nServer Temp Key: ECDH, P-384, 384 bits\r\n---\r\nSSL handshake has read 3852 bytes and written 519 bytes\r\nVerification: OK\r\n---\r\nNew, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384\r\nServer public key is 2048 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nNo ALPN negotiated\r\nSSL-Session:\r\n    Protocol  : TLSv1.2\r\n    Cipher    : ECDHE-RSA-AES256-GCM-SHA384\r\n    Session-ID: [...]\r\n    Session-ID-ctx:\r\n    Master-Key: [...]\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    Start Time: 1625840474\r\n    Timeout   : 7200 (sec)\r\n    Verify return code: 0 (ok)\r\n    Extended master secret: yes\r\n---\r\n250 SMTPUTF8\r\n<\/pre>\n
    \r\nFrom ns2.te-clan.ch\r\n$ openssl s_client -host 104.47.74.33 -port 25 -starttls smtp\r\nCONNECTED(00000003)\r\ndepth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA\r\nverify return:1\r\ndepth=1 C = US, O = DigiCert Inc, CN = DigiCert Cloud Services CA-1\r\nverify return:1\r\ndepth=0 C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, CN = mail.protection.outlook.com\r\nverify return:1\r\n---\r\nCertificate chain\r\n 0 s:\/C=US\/ST=Washington\/L=Redmond\/O=Microsoft Corporation\/CN=mail.protection.outlook.com\r\n   i:\/C=US\/O=DigiCert Inc\/CN=DigiCert Cloud Services CA-1\r\n 1 s:\/C=US\/O=DigiCert Inc\/CN=DigiCert Cloud Services CA-1\r\n   i:\/C=US\/O=DigiCert Inc\/OU=www.digicert.com\/CN=DigiCert Global Root CA\r\n---\r\nServer certificate\r\n-----BEGIN CERTIFICATE-----\r\n[...]\r\n-----END CERTIFICATE-----\r\nsubject=\/C=US\/ST=Washington\/L=Redmond\/O=Microsoft Corporation\/CN=mail.protection.outlook.com\r\nissuer=\/C=US\/O=DigiCert Inc\/CN=DigiCert Cloud Services CA-1\r\n---\r\nNo client certificate CA names sent\r\n---\r\nSSL handshake has read 3847 bytes and written 502 bytes\r\n---\r\nNew, TLSv1\/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384\r\nServer public key is 2048 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nSSL-Session:\r\n    Protocol  : TLSv1.2\r\n    Cipher    : ECDHE-RSA-AES256-GCM-SHA384\r\n    Session-ID: [...]\r\n    Session-ID-ctx:\r\n    Master-Key: [...]\r\n    Key-Arg   : None\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    Start Time: 1625840680\r\n    Timeout   : 300 (sec)\r\n    Verify return code: 0 (ok)\r\n---\r\n250 SMTPUTF8\r\n<\/pre>\n
    OpenSSL Cookbook<\/h3>\n
    <\/a><\/p>\n
    Testing Protocols that Upgrade to TLS<\/h4>\n
    When used with HTTP, TLS wraps the entire plain-text communication channel to form HTTPS. Some other protocols start off as plaintext, but then they upgrade to encryption. If you want to test such a protocol, you\u2019ll have to tell OpenSSL which protocol it is so that it can upgrade on your behalf. Provide the protocol information using the -starttls<\/code> switch. For example:<\/p>\n
    $ openssl s_client -connect gmail-smtp-in.l.google.com:25 -starttls smtp
    \nAt the time of writing, the supported protocols in recent OpenSSL releases are smtp, pop3, imap, ftp, xmpp, xmpp-server, irc, postgres, mysql, lmtp, nntp, sieve, and ldap. There is less choice with OpenSSL 1.0.2g: smtp, pop3, imap, ftp, and xmpp.<\/p>\n
    Some protocols require the client to provide their names. For example, for SMTP, OpenSSL will use mail.example.com by default, but you can specify the correct value with the -name switch. If you\u2019re testing XMPP, you may need to specify the correct server name; you can do this with the -xmpphost switch.<\/p>\n
    s\/qmail<\/h3>\n
    Linked: Erwin Hoffmann<\/a>
    \n    github.com\/wavemechanics\/sqmail-port<\/a>
    \n    Installing s\/qmail<\/a>
    \n    FreeBSD Port: qmail-spamcontrol-1.03.2731_2<\/a><\/p>\n
    IndiMail<\/h3>\n
    IndiMail is a Secure, Reliable, Efficient Messaging Platform which provides you everything needed in a modern messaging server – ESMTP, IMAP, POP3, QMTP, QMQP and many other features. IndiMail gives you speeds that are faster than most MTAs. The flexibility provided by IndiMail’s authentication methods allow any IMAP\/POP3 server to be used with IndiMail. IndiMail is built for speed and flexibility. You can download the source or use the binary RPM generated by openSUSE Build Service.
    \n    IndiMail<\/a>
    \n    IndiMail<\/a>
    \n    github.com\/mbhangui\/indimail-mta<\/a><\/p>\n
    sslscan<\/h3>\n
    github.com\/rbsec\/sslscan<\/a>
    \n    sslscan Fast SSL port scanner<\/a><\/p>\n
    \r\nC:\\Users\\andreas\\Downloads\\sslscan-win-2.0.10>sslscan.exe --starttls-smtp mail.xyz.abc:25\r\nVersion: 2.0.10 Windows 64-bit (Mingw)\r\nOpenSSL 1.1.1e-dev  xx XXX xxxx\r\n\r\nConnected to x.x.x.x\r\n\r\nTesting SSL server mail.xyz.abc on port 25 using SNI name mail.xyz.abc\r\n\r\n  SSL\/TLS Protocols:\r\nSSLv2     enabled\r\nSSLv3     disabled\r\nTLSv1.0   enabled\r\nTLSv1.1   enabled\r\nTLSv1.2   enabled\r\nTLSv1.3   disabled\r\n\r\n  TLS Fallback SCSV:\r\nConnection failed - unable to determine TLS Fallback SCSV support\r\n\r\n  TLS renegotiation:\r\nSession renegotiation not supported\r\n\r\n  TLS Compression:\r\nCompression disabled\r\n\r\n  Heartbleed:\r\nTLSv1.2 not vulnerable to heartbleed\r\nTLSv1.1 not vulnerable to heartbleed\r\nTLSv1.0 not vulnerable to heartbleed\r\n\r\n  Supported Server Cipher(s):\r\nPreferred TLSv1.2  56 bits   TLS_RSA_WITH_DES_CBC_SHA\r\nPreferred TLSv1.1  56 bits   TLS_RSA_WITH_DES_CBC_SHA\r\nPreferred TLSv1.1  56 bits   TLS_DHE_RSA_WITH_DES_CBC_SHA\r\nPreferred TLSv1.0  256 bits  DHE-RSA-AES256-SHA            DHE 1024 bits\r\nAccepted  TLSv1.0  56 bits   TLS_RSA_WITH_DES_CBC_SHA\r\n\r\n  SSL Certificate:\r\nSignature Algorithm: sha1WithRSAEncryption\r\nRSA Key Strength:    1024\r\n\r\nSubject:  Andreas Bachmann\r\nIssuer:   Andreas Bachmann\r\n\r\nNot valid before: Apr 22 11:27:56 2019 GMT\r\nNot valid after:  Apr 20 11:27:56 2024 GMT\r\n<\/pre>\n
    FreeBSD Ports: qmail-tls<\/h1>\n
    \r\n# make clean\r\n# make rmconfig\r\n# make patch\r\n[...]\r\n===>  Patching for netqmail-tls-1.06.20200107_4\r\n===>  Applying distribution patches for netqmail-tls-1.06.20200107_4\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-amd64\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-utmpx\r\n===>  Applying extra patch \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/extra-patch-dns-cname\r\n===>  Applying FreeBSD patches for netqmail-tls-1.06.20200107_4 from \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\r\nHmm...  Looks like a unified diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|--- auth.patch.orig    2002-05-10 00:41:20.000000000 -0500\r\n|+++ auth.patch 2014-06-24 14:30:00.122166435 -0500\r\n--------------------------\r\nPatching file auth.patch using Plan A...\r\nHunk #1 succeeded at 14.\r\nHunk #2 succeeded at 176.\r\ndone\r\nHmm...  Looks like a new-style context diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|*** Makefile.orig      Mon Jun 15 05:53:16 1998\r\n|--- Makefile   Fri May 10 00:31:38 2002\r\n--------------------------\r\nPatching file Makefile using Plan A...\r\nHunk #1 succeeded at 125 (offset -11 lines).\r\nHunk #2 succeeded at 1545 (offset 4 lines).\r\nHunk #3 succeeded at 1548 (offset -9 lines).\r\nHmm...  The next patch looks like a new-style context diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|\r\n|\r\n|*** TARGETS.orig       Mon Jun 15 05:53:16 1998\r\n|--- TARGETS    Fri May 10 00:31:38 2002\r\n--------------------------\r\nPatching file TARGETS using Plan A...\r\nHunk #1 succeeded at 252 (offset 2 lines).\r\nHmm...  The next patch looks like a new-style context diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|\r\n|\r\n|*** qmail-smtpd.8.orig Mon Jun 15 05:53:16 1998\r\n|--- qmail-smtpd.8      Fri May 10 00:31:38 2002\r\n--------------------------\r\nPatching file qmail-smtpd.8 using Plan A...\r\nHunk #1 succeeded at 3.\r\nHunk #2 succeeded at 37 (offset 9 lines).\r\nHunk #3 succeeded at 256 (offset 52 lines).\r\nHmm...  The next patch looks like a new-style context diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|\r\n|\r\n|*** qmail-smtpd.c.orig Mon Jun 15 05:53:16 1998\r\n|--- qmail-smtpd.c      Fri May 10 00:33:35 2002\r\n--------------------------\r\nPatching file qmail-smtpd.c using Plan A...\r\nHunk #1 succeeded at 23.\r\nHunk #2 succeeded at 89 with fuzz 1 (offset 27 lines).\r\nHunk #3 succeeded at 254 with fuzz 2 (offset -23 lines).\r\nHunk #4 succeeded at 852 with fuzz 2 (offset 438 lines).\r\nNo such line 845 in input file, ignoring\r\nHunk #5 succeeded at 624 (offset -20 lines).\r\ndone\r\nHmm...  Looks like a unified diff to me...\r\nThe text leading up to this was:\r\n--------------------------\r\n|--- qmail-smtpd.c.orig Sat Jan 18 09:13:50 2003\r\n|+++ qmail-smtpd.c      Sat Jan 18 19:51:09 2003\r\n--------------------------\r\nPatching file qmail-smtpd.c using Plan A...\r\nHunk #1 succeeded at 883 (offset 424 lines).\r\ndone\r\n<\/pre>\n
    \r\n# make\r\n[...]\r\n===>  Staging for netqmail-tls-1.06.20200107_4\r\n===>   Generating temporary packing list\r\n===> Creating groups.\r\n===> Creating users\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/dnsfq \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/hostname \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/dnsip \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/ipmeprint \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/dnsptr \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -s -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/install.nostage \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\/install\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/config \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/config-fast \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/configure\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/home \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/home+df \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/proc \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/proc+df \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm1+df \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm2 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm2+df \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm3 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/binm3+df \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/maildir \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/qmailsmtpd \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/qmailsend \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/boot\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/forward.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/condredirect.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/bouncesaying.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/except.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/maildirmake.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/maildir2mbox.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/maildirwatch.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/mailsubj.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qreceipt.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qbiff.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/preline.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/tcp-env.1 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man1\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/addresses.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/envelopes.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/maildir.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/mbox.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/dot-qmail.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-control.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-header.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-log.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-users.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/tcp-environ.5 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man5\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/forgeries.7 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man7\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-limits.7 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man7\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail.7 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man7\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-local.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-lspawn.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-getpw.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-remote.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-rspawn.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-clean.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-send.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-start.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/splogger.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-queue.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-inject.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-showctl.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-newmrh.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-newu.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-pw2u.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-qread.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-qstat.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-tcpok.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-tcpto.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-pop3d.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-popup.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-qmqpc.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-qmqpd.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-qmtpd.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-smtpd.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 444 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/qmail-command.8 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/man\/man8\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/BLURB \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/BLURB2 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/BLURB3 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/BLURB4 \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INTERNALS \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/SECURITY \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/THOUGHTS \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/FAQ \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/UPGRADE \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/SENDMAIL \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.alias \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.ctl \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.ids \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.maildir \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.mbox \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/INSTALL.vsm \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/TEST.deliver \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/TEST.receive \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/REMOVE.sendmail \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/REMOVE.binmail \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.local2alias \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.local2ext \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.local2local \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.local2rem \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.local2virt \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.nullclient \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.relaybad \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.relaygood \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/netqmail-1.06\/PIC.rem2local \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/mailer.conf.sample \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/TLS.readme \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/doc\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/..\/qmail\/files\/mkaliasdir \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/scripts\r\ninstall  -m 555 \/usr\/ports\/mail\/qmail-tls\/work\/enable-qmail \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/scripts\r\n=============================================\r\n\r\nATTENTION\r\n\r\nAdd the following line to your \/etc\/make.conf\r\nQMAIL_SLAVEPORT=tls\r\n\r\n=============================================\r\n\r\ninstall  -m 0644 \/usr\/ports\/mail\/qmail-tls\/work\/qmail.conf \/usr\/ports\/mail\/qmail-tls\/work\/stage\/usr\/local\/etc\/man.d\/qmail.conf\r\n===> Fixing plist for \/var\/qmail ownership\r\n\/bin\/rm -f -r \/usr\/ports\/mail\/qmail-tls\/work\/stage\/var\/qmail\/queue\/\r\n====> Compressing man pages (compress-man)\r\n<\/pre>\n
    \r\n# make install\r\n===>  Installing for netqmail-tls-1.06.20200107_4\r\n===>  Checking if netqmail-tls is already installed\r\n===>   Registering installation for netqmail-tls-1.06.20200107_4\r\npkg-static: Warning: @unexec is deprecated, please use @[pre|post]unexec\r\npkg-static: Warning: @exec is deprecated, please use @[pre|post][un]exec\r\nInstalling netqmail-tls-1.06.20200107_4...\r\n===> Creating groups.\r\nUsing existing group 'qmail'.\r\nUsing existing group 'qnofiles'.\r\n===> Creating users\r\nUsing existing user 'alias'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmaild'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmaill'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmailp'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmailq'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmailr'.\r\n===> Creating homedir(s)\r\nUsing existing user 'qmails'.\r\n===> Creating homedir(s)\r\nYour hostname is ns3.te-clan.ch.\r\nhard error\r\nSorry, I couldn't find your host's canonical name in DNS.\r\nYou will have to set up control\/me yourself.\r\n        ATTENTION:\r\n\r\nDo not forget to read \/var\/qmail\/doc\/TLS.readme. After all,\r\nthis is NOT our old stock qmail.\r\n\r\nYou can enable qmail as your default mailer executing:\r\n> \/var\/qmail\/scripts\/enable-qmail\r\n\r\n==> As you need to provide a working certificate in \/var\/qmail\/control\/cert.pem :\r\n\r\n# makes a self-signed certificate\r\n3) do "make certificate"\r\n\r\n# makes a certificate request\r\n4) do "make certificate-req"\r\n\r\n===> SECURITY REPORT:\r\n      This port has installed the following binaries which execute with\r\n      increased privileges.\r\n\/var\/qmail\/bin\/qmail-queue\r\n\r\n      If there are vulnerabilities in these programs there may be a security\r\n      risk to the system. FreeBSD makes no guarantee about the security of\r\n      ports included in the Ports Collection. Please type 'make deinstall'\r\n      to deinstall the port if this is a concern.\r\n\r\n      For more information, and contact details about the security\r\n      status of this software, see the following webpage:\r\nhttp:\/\/inoa.net\/qmail-tls\/\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
    qmail variants s\/qmail qmail-ldap, by Andr\u00e9 Oppermann (LinkedIn, Xing) Life With qmail-ldap freshports.org qmail qmail-tls: Secure, reliable, and fast MTA for UNIX systems with TLS support Repository https:\/\/cgit.freebsd.org\/ports\/tree\/mail\/qmail?h=release\/12.2.0 FreeBSD 10.2 ZHAW -> tE-Clan Server ==> works tE-Clan Server -> ZHAW ==> DOESN’T work!! $ pkg info netqmail-tls netqmail-tls-1.06.20110119_1 Name : netqmail-tls Version : 1.06.20110119_1 Installed […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-12358","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/12358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12358"}],"version-history":[{"count":27,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/12358\/revisions"}],"predecessor-version":[{"id":12447,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=\/wp\/v2\/posts\/12358\/revisions\/12447"}],"wp:attachment":[{"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12358"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12358"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bachi.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}