[GF-Users] Postfix-tlspol 1.8.27

[Michael Webb]

Hi Peter

When convenient, please could you build updated rpms for Postfix-tlspol?

Postfix-tlspol has been updated a few times but I have held off asking until now as the previous updates were to fix issues that did not affect EL8/9/10. The most recent will update Golang to v1.26.1 for security fixes see https://github.com/Zuplu/postfix-tlspol/releases/tag/v1.8.27

To force the build to use Golang 1.26.1 or later,  we need to ensure that line 44 in the SPEC file is set to "export GOTOOLCHAIN=auto" and related lines commented and uncommented as indicated, but I think we started doing it this way a few versions ago already. (When I tried "local" the build seemed to still be using go1.25.7.)

No other changes are necessary, but FYI, I have also changed line 39 in my SPEC file because I felt that to specify the folder name was more intuitive and easier to troubleshoot if the build fails:
From: %setup a0
To:  %setup -q -n %{archivename}

Builds for EL9 and EL10 installed successfully on production systems with no apparent problems. The build sources and outputs can be found at the link below. I used revision "0" (postfix-tlspol-1.8.27-0) so that when you release your rpms, mine will be replaced when I update with dnf.

https://www.integrilog.com/adhj5jkuuk2sfsf0/postfix-tlspol/Custom%201.8.27/0/

For users who want to test, run the following after the install (can use to test if a domain has tlsa and mta-sts records). Integrilog.com has both.
/usr/bin/postfix-tlspol -config /etc/postfix-tlspol/config.yaml -query integrilog.com

For those who have never seen this before, postfix-tlspol is the only package presently available that can achieve postfix mail delivery compliance with rfc8461, rfc6698 and rfc7672.

Regards
Mike





-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ghettoforge.net/pipermail/users/attachments/20260313/9a8174ce/attachment.html