ports/154997: [PATCH] mail/getmail: add SSL warning to pkg-descr

Matthias Andree matthias.andree at gmx.de
Thu Feb 24 09:40:05 UTC 2011

>Number:         154997
>Category:       ports
>Synopsis:       [PATCH] mail/getmail: add SSL warning to pkg-descr
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Thu Feb 24 09:40:04 UTC 2011
>Originator:     Matthias Andree
>Release:        FreeBSD 8.1-RELEASE i386
System: FreeBSD rho.emma.line.org 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Jul 19 02:55:53 UTC 2010
- add a WARNING to pkg-descr stating that SSL doesn't validate
  certificates, thus not protecting against MITM eavesdropping

  evidence (as of 2011-02-24 09:00 UTC):

- remove MD5 checksum

Port maintainer (question+fbsdports at closedsrc.org) is cc'd;

Linh, please follow up to this PR with a message stating whether or not
you approve of the changes.

Generated with FreeBSD Port Tools 0.99

--- getmail-4.20.0.patch begins here ---
diff -ruN --exclude=CVS /usr/ports/mail/getmail/distinfo /usr/home/emma/ports/mail/getmail/distinfo
--- /usr/ports/mail/getmail/distinfo	2010-07-01 07:58:10.000000000 +0200
+++ /usr/home/emma/ports/mail/getmail/distinfo	2011-02-24 09:59:29.000000000 +0100
@@ -1,3 +1,2 @@
-MD5 (getmail-4.20.0.tar.gz) = 33a090d62b6039e0a8df4c3da545d851
 SHA256 (getmail-4.20.0.tar.gz) = d6ce51d366c4d91f960a39dbd5f8821f8b0d79bb880f215a9839ee6054f6979d
 SIZE (getmail-4.20.0.tar.gz) = 156907
diff -ruN --exclude=CVS /usr/ports/mail/getmail/pkg-descr /usr/home/emma/ports/mail/getmail/pkg-descr
--- /usr/ports/mail/getmail/pkg-descr	2005-02-22 07:04:39.000000000 +0100
+++ /usr/home/emma/ports/mail/getmail/pkg-descr	2011-02-24 10:01:18.000000000 +0100
@@ -3,6 +3,8 @@
 Summary of features:
 - Retrieve mail from an unlimited number of POP3/IMAP4 mailboxes and servers. 
 - Support for POP3-over-SSL and IMAP-over-SSL, as well as SDPS
+  WARNING: even with SSL, "no certificate or key validation is done." so
+  that getmail does not detect or protect from man-in-the-middle attacks. 
 - Support for multidrop or domain mailboxes. 
 - Safe and reliable delivery to qmail-style Maildirs, as well as program
   (pipe) delivery for use with arbitrary external MDAs. Includes an MDA
--- getmail-4.20.0.patch ends here ---


More information about the freebsd-ports-bugs mailing list