From owner-freebsd-ports@freebsd.org Wed Apr 24 19:43:29 2019 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E13D315A187C for ; Wed, 24 Apr 2019 19:43:28 +0000 (UTC) (envelope-from thierry@pompo.net) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 6000E76672 for ; Wed, 24 Apr 2019 19:43:28 +0000 (UTC) (envelope-from thierry@pompo.net) Received: by mailman.ysv.freebsd.org (Postfix) id 1CAF915A187B; Wed, 24 Apr 2019 19:43:28 +0000 (UTC) Delivered-To: ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EE33A15A187A for ; Wed, 24 Apr 2019 19:43:27 +0000 (UTC) (envelope-from thierry@pompo.net) Received: from erza.lautre.net (erza.lautre.net [80.67.160.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "lautre.net", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A60BF7666F; Wed, 24 Apr 2019 19:43:26 +0000 (UTC) (envelope-from thierry@pompo.net) Received: from graf.pompo.net (graf.pompo.net [78.225.128.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by erza.lautre.net (Postfix) with ESMTPSA id D9506E04C1; Wed, 24 Apr 2019 21:43:23 +0200 (CEST) Received: by graf.pompo.net (Postfix, from userid 1001) id 88F6B3A08B9; Wed, 24 Apr 2019 21:43:22 +0200 (CEST) Date: Wed, 24 Apr 2019 21:43:22 +0200 From: Thierry Thomas To: Adam Bernstein Cc: ports@freebsd.org, tz@freebsd.org Subject: Re: cclient, panda-cclient, and php71-imap (and others?) Message-ID: <20190424194322.GX57102@graf.pompo.net> Mail-Followup-To: Adam Bernstein , ports@freebsd.org, tz@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="x38akuY2VS0PywU3" Content-Disposition: inline In-Reply-To: X-Operating-System: FreeBSD 12.0-STABLE amd64 Organization: Kabbale Eros X-Face: (hRbQnK~Pt7$ct`!fupO(`y_WL4^-Iwn4@ly-.,[4xC4xc; y=\ipKMNm<1J>lv@PP~7Z<.t KjAnXLs: X-PGP: 0xF1C516B3C8359753 User-Agent: Mutt/1.11.4 (2019-03-13) X-Rspamd-Queue-Id: A60BF7666F X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-7.28 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[cached: mx.lautre.net]; NEURAL_HAM_SHORT(-0.96)[-0.961,0]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30)[thierry@freebsd.org,thierry@pompo.net]; IP_SCORE(-3.41)[ip: (-9.31), ipnet: 80.67.160.0/19(-4.29), asn: 20766(-3.43), country: FR(-0.01)]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:20766, ipnet:80.67.160.0/19, country:FR]; MIME_TRACE(0.00)[0:+,1:+]; FROM_NEQ_ENVFROM(0.00)[thierry@freebsd.org,thierry@pompo.net]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[freebsd.org]; AUTH_NA(1.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[89.160.67.80.list.dnswl.org : 127.0.10.0]; R_SPF_NA(0.00)[] X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Apr 2019 19:43:29 -0000 --x38akuY2VS0PywU3 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Le lun. 22 avr. 19 =E0 20:05:07 +0200, Adam Bernstein =E9crivait=A0: > It seems to me that 'mail/cclient' should be marked as broken with=20 > current OpenSSL=20 > (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D226621), and possibl= y=20 > as unmaintained, and that all other ports that use it (the one that=20 > concerns us currently is 'php71-imap') should switch to using the fork=20 > 'panda-cclient' instead. That fork has this bug fixed already, and=20 > php71-imap offers panda-cclient as a build option but not as the default. Indeed, I've been using Panda for a long time, and it is a safer replacement for cclient and uw-imap, and we could set it by default. (adding PHP maintainer to Cc:) > Or am I missing something? If not, is there anything we can do to=20 > facilitate? However, note that Panda is not bulletproof, and mostly unmaintained too. Someone tries to revive this project and help is wanted: see https://github.com/nkhorman/panda-imap/issues Regards, --=20 Th. Thomas. --x38akuY2VS0PywU3 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJcwLxaXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFNTM2QkU4NTM4NTM5OUQwMEI2RkFBNzZG MUM1MTZCM0M4MzU5NzUzAAoJEPHFFrPINZdTgdIP/jqIK4nGHooAmeN4AudF2gUq wonrjIn8ha9m/taTEu4Z8AtiDUgRcjT3Jf0crGze5pLHBPxrvsy8W5ZhavK2QA8O FkgCrNV1jt4mPX01XQqSHt/KW+MpDCKQSkpusPA6KJE8RF/FiWsCSxb0KBgs1Yaj bWy992tZfKPfkCjDawanfF4pc99rjgwC9+63gtBWZVquwHXabZ+/X02L5HLYvlcB bNk6X7LYyLaAFBaA1KWg2DmSFaK1wmNumWgPHKu9zPV2ifloajk3C49/3cA/CHbI W/NeTcpFiBmk5z2gApc0x+GqQRc6bk5teK7TeVx7glZCYLErVP2eIJal968gG9NO Q9Ymviemm/vFMN+XlPfI+YBxARF9YAfd1a8fIFo0J+bycZhhU20pKJ/ub8YmFE4G ADKflny6OBWP+UA+YQFufpFEGWqX90eto8XnQtqUI7ItqQgHfyCCFAhTKUFt+ncv GX7Y285XF/YuHWT5Wr8+B0HLieULdv2Ul2HdemNPaccaSCwAvtS/IC1VQWQb1VNG d3lpMjh6B9V6yJ3ERnGQolfCuaqhbeUeOSWQIxTzhxkkjyHykcMJPkOkQ0pMM8yK B3wsydflxs0OwrHwGUQzAt6k9YU1Fi4FnuqIqPsnLBdK8vKk24fpRtpRE0fqmiDD 3BuatliD0q6wU4gRkANb =xyZD -----END PGP SIGNATURE----- --x38akuY2VS0PywU3--