[regression] mail stalls; postfix chroot setup nests /etc/ssl/certs to deep

Bug #1026261 reported by Matthias Andree
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
postfix (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Since the (overdue) update from maverick to natty, my Postfix no longer recognizes the certificates.

Apparently the reason is that the smtp_tls_CApath, which is set to /etc/ssl/certs, is improperly copied into the chroot area, namely
to /var/spool/postfix/etc/ssl/certs/etc/ssl/certs,
rather than /var/spool/postfix/etc/ssl/certs where it belongs.

In /etc/postfix/main.cf, I have
smtp_tls_CApath = /etc/ssl/certs

and smtp runs chrooted (from looking at /etc/postfix/master.cf).

The certificate bundle appears to be setup properly, only the .pem/.0 files from the directory seem to be affected.

Workaround:
sudo postconf -e smtp_tls_CAfile=/etc/ssl/certs/ca-certificates.crt
sudo service postfix restart

From looking at what I get when running sh -x postfix, it would seem that

+ find /etc/ssl/certs -print0
+ cpio -0pdL /var/spool/postfix/etc/ssl/certs.NEW

causes the duplication of paths - the cpio input file list is fully concatenated to the cpio destination path.

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: postfix 2.8.5-2~build0.11.04
ProcVersionSignature: Ubuntu 2.6.38-15.61-generic-pae 2.6.38.8
Uname: Linux 2.6.38-15-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Wed Jul 18 19:30:51 2012
EcryptfsInUse: Yes
ProcEnviron:
 LANGUAGE=de_DE:de:en_GB:en
 PATH=(custom, no user)
 LANG=de_DE.utf8
 SHELL=/bin/bash
SourcePackage: postfix
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Matthias Andree (matthias-andree) wrote :
Revision history for this message
Matthias Andree (matthias-andree) wrote :
Revision history for this message
Matthias Andree (matthias-andree) wrote :
Revision history for this message
Scott Kitterman (kitterman) wrote :

I can confirm this. Looking into it a bit.

Changed in postfix (Ubuntu):
importance: Undecided → High
status: New → Confirmed
Revision history for this message
Scott Kitterman (kitterman) wrote :

This is already fixed in precise, quantal, and I think oneiric.

Changed in postfix (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Matthias Andree (matthias-andree) wrote : Re: [Bug 1026261] Re: [regression] mail stalls; postfix chroot setup nests /etc/ssl/certs to deep

Fix confirmed for precise; not tested on the others.

Can this be fixed for natty please?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.