Re: TLS in smtpserver

[Matti Aarnio <mea@nic.funet.fi>]

> Wow!  It works!
> 
> Matti,
> I'd like to suggest including the connection/auth information into
> the Received header: auth name, SSLvX/TLS/unencrypted and client's
> certificate in "oneline" format it available.

	Yes and no, that is actually a fairly sizable can of worms.
	Perhaps with a runtime option (PARAM), which local admin
	can decide if that information if ok at the Received: header:

Received: from as200.spellcast.com ([IPv6:::ffff:199.233.184.201]:16962 "EHLO kvack.org" ident: "majordomo" whoson: "-unavailable-") by mea.tmt.tele.fi with ESMTP id <S.rCR2p92378>; Wed, 12 May 1999 22:06:29 +0300

	The smtpserver log file will contain the information, but
	it is doubtfull that everybody want to make that information
	available at all messages going thru, even when STARTTLS and
	AUTH are used.  I will consider that soon.

> As far as I understand, by default ssl headers are installed in
> /usr/local/ssl/include/  and not in /usr/local/ssl/include/openssl/
> where you are expecting them.  This affects configure script and
> smtpserver/smtpserver.h

I used this source:

#!/bin/sh
rsync -rlztpv --delete dev.openssl.org::openssl-cvs/ /home/mea/src/CVSROOT-OPENSSL/

(then 'cvs co openssl' out of that repository)

Yep, it isn't 0.9.2b, it is something towards 0.9.3 ...

> Eugene

/Matti Aarnio