https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8526
Bug ID: 8526
Summary: spamd --ssl needs IO::Socket::SSL 1.994 or later
Product: Spamassassin
Version: SVN Trunk (Latest Devel Version)
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: spamc/spamd
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: Undefined
Created attachment 6228
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=6228&action=edit
make spamd require IO::Socket::SSL 1.994 or later for --ssl
SpamAssassin declares IO::Socket::SSL 1.76 as the minimum version for spamd
--ssl, but spamd's SSL code needs newer versions. Since 4.0.0 spamd calls
get_sslversion, which IO::Socket::SSL added in 1.964, so with older versions
every --ssl connection fails and spamc returns the message unscanned. Since
4.0.3 spamd creates its SSL listener with SSL_startHandshake => 0, which
IO::Socket::SSL honours in accept only from 1.994, so with older versions every
--ssl request hangs.
CentOS 7 (and RHEL 7) packages IO::Socket::SSL 1.94.
The attached patch makes spamd require IO::Socket::SSL 1.994 or later for
--ssl, with an error message at startup, and makes spamd --version report SSL
support only with such a version, so the SSL tests skip on older systems. It
raises the version in DependencyInfo.pm, Makefile.PL and INSTALL, documents it
in spamd's POD, and adds a note to UPGRADE.
--
You are receiving this mail because:
You are the assignee for the bug.
