- update to 3.3.2
Changelog:
20180617
Bugfix (introduced: Postfix 2.11): minor memory leak when minting issuer certs. This affects a tiny minority of use cases. Viktor Dukhovni, based on a fix by Juan Altmayer Pizzorno for the ssl_dane library.
20180817
Workaround: postconf build did not abort if the m4 command is not installed (on a system that does have the make command, the awk command, the perl command, and the C compiler?!).
20181104
Multiple 'bit rot' fixes for OpenSSL API changes, including support to disable TLSv1.3, to avoid issuing multiple session tickets, and to allow OpenSSL >= 1.1.0 run-time micro version bumps without complaining about library version mismatches. Viktor Dukhovni.
20181106
Bugfix (introduced: 3.0): smtpd_discard_ehlo_keywords could not disable "SMTPUTF8". because the lookup table was using "EHLO_MASK_SMTPUTF8" instead.
20181110
Documentation: update documentation for Postfix versions that support disabling TLS 1.3.
20181117
Improved logging of TLS 1.3 summary information, and improved reporting of the same info in Received: message headers. Viktor Dukhovni.
MFH: 2018Q4