Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dovecot: avoid testing DES-encrypted passwords #222022

Merged
merged 1 commit into from
Mar 20, 2023

Conversation

vcunat
Copy link
Member

@vcunat vcunat commented Mar 19, 2023

Those tests wouldn't work since #220557

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.05 Release Notes (or backporting 22.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@vcunat
Copy link
Member Author

vcunat commented Mar 19, 2023

Dovecot maintainers should confirm that dropping DES support here shouldn't cause trouble in practice: @fpletz, @globin, @ajs124.

@vcunat
Copy link
Member Author

vcunat commented Mar 19, 2023

Perhaps you'd like to also like to add dovecot to the list of packages explicitly mentioned in release notes?

@ajs124
Copy link
Member

ajs124 commented Mar 20, 2023

Perhaps you'd like to also like to add dovecot to the list of packages explicitly mentioned in release notes?

Sounds like a good idea.

@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: changelog 8.has: documentation This PR adds or changes documentation labels Mar 20, 2023
@mweinelt mweinelt mentioned this pull request Mar 20, 2023
6 tasks
Copy link
Member

@fpletz fpletz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When using a custom passwd/shadow file for dovecot, the command doveadm pw generates a bcrypt based hash by default - even before the libxcrypt changes. I don't think anyone still uses DES and if they do, they should upgrade anyways (e.g. because only the first 8 characters of the plain password are actually hashed).

@vcunat
Copy link
Member Author

vcunat commented Mar 20, 2023

IIRC the default changed at the start of dovecot-2.3, so something like 2017.

@vcunat vcunat merged commit f18e6d2 into NixOS:staging-next Mar 20, 2023
@@ -41,6 +41,9 @@ stdenv.mkDerivation rec {
sed -i -s -E 's!\bcat\b!${coreutils}/bin/cat!g' src/lib-smtp/test-bin/*.sh

patchShebangs src/config/settings-get.pl

# DES-encrypted passwords are not supported by NixPkgs anymore
Copy link
Member

@SuperSandro2000 SuperSandro2000 Mar 21, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit *Nixpkgs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: changelog 8.has: documentation This PR adds or changes documentation 10.rebuild-darwin: 1-10 10.rebuild-linux: 1-10
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants