Re: [Fetchmail-users] Password length restriction

[Eike L. <zp...@gm...>]

On Wednesday, 15 July 2020 17:13:08 -04 Matthias Andree wrote:
> Am 15.07.20 um 19:02 schrieb Eike Lantzsch:
> > If you don't mind my AOL-post ...
> > There are some distributions which are not including any recent
> > fetchmail version.
> > I really don't get it why e.g. openSuse comes with 6.3.26 fetchmail.
> > If mayor producers of Linux Distros are going on with this practice
> > questions like the one of the OP are bound to appear again and
> > again.
> > It seems to be a widely common assumption that the latest distro
> > comes with the latest ports - not at all, not at all.
> > Not good.
>
> So be it, we'll politely tell people that the official support list is
> for officially supported releases (meaning the 6.4.X series at the
> time of writing), and what they (the users) make of that depends a
> bit on their skills and how much effort they want to spend.
>
> > Not long ago OpenBsd e.g. was still with 6.3.xx when 6.4.xx was
> > already available upstream. Now OpenBSD 6.7 Release comes with
> > 6.4.3.
> OpenBSD is a different story, their LibreSSL isn't up to speed with
> TLSv1.3. So it works with fetchmail 6.4.x, but not with 6.5.x (for
> instance beta1), as of OpenBSD 6.7. Their base system libressl isn't
> up to speed with TLS v1.3 which fetchmail 6.5 (a future release) will
> require, in the form of requiring the OpenSSL 1.1.1 API as well. I
> know the OpenBSD/LibreSSL are working on TLSv1.3, but it's not there
> yet.
That is good to know. Thank you for the enlightenment!
OpenBSD is working with manpower constraints and consequently they need
to decide wisely where to put their efforts in. TLSv1.3 is certainly
important.
>
> Otherwise someone else port fetchmail 6.5.x to OpenBSD's OpenSSL port,
> which is packaged so far differently from everything I've seen that I
> won't bother supporting it in fetchmail upstream with libecrypt
> libessl and whatnot.
> OpenBSD need to get their act together anyways. They forked OpenSSL
> into LibreSSL due to security issues, but don't deliver on up-to-date
> protocols. It's a bit of an inconsistent impression they are leaving
> with me.
>
> > At least on OpenBSD compiling the latest upstream version fo
> > fetchmail is straight forward and easy.
>
> Yes, for the recent OpenBSD versions and fetchmail 6.4.x (which
> tolerates OpenSSL 1.0.2 and compatible libraries).
>
> > On Linux I don't know but would be worth a try.
>
> I routinely test on recent Fedora and Ubuntu Linux and on FreeBSD, and
> occasionally on OpenBSD and I've tested with OpenIllumos Hipster
> which just crashed into a "disk full" condition in my virtual machine
> when trying to upgrade. No-one told me I'd need to keep 8 GB for
> updates. ;)
> > Anyway I admire your patience giving a helpful answer despite the
> > OP's question based on outdated software.
>
> I had to learn that part. ;)

Thank you and keep up the good work!

--
Eike Lantzsch ZP6CGE