Fixing Postfix's CApath.

1 files changed, 37 insertions, 0 deletions

diff --git a/scripts/postfix-fixcerts.sh b/scripts/postfix-fixcerts.sh
new file mode 100755
index 0000000..b9ec25a
--- /dev/null
+++ b/scripts/postfix-fixcerts.sh
@@ -0,0 +1,37 @@
+#!/bin/sh
+
+# This script lists the content of the directory / the files specifing
+# the trusted CAs in Postfix's configuration, makes a copy in the chroot
+# jail and rehash the directory if necessary.
+# 
+# Usage: sudo ./postfix-fixcerts.sh
+#
+# References:
+# - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579247
+# - https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/828047
+
+queue_directory=$(postconf -h queue_directory)
+
+for K in smtp_tls_CAfile smtpd_tls_CAfile; do
+    CAfile=$(postconf -h "$K")
+    if [ -n "$CAfile" ]; then
+        [ -f "$CAfile" -a -r "$CAfile" ] || exit 1
+
+        certs=$(dirname "$queue_directory/${CAfile#/}")
+        mkdir -m 0755 --parent "$certs"
+        cp -L "$CAfile" "$certs"
+    fi
+done
+
+for K in smtp_tls_CApath smtpd_tls_CApath; do
+    CApath=$(postconf -h "$K")
+    if [ -n "$CApath" ]; then
+        [ -d "$CApath" -a -r "$CApath" ] || exit 1
+        echo "$CApath" "$queue_directory/${CApath#/}"
+    fi
+done | sort -u | \
+while read S T; do
+    mkdir -m 0755 --parent "$T"
+    find -L "$S" -type f -a \( \! -name '*.[0-9]' \) -print0 | xargs -r0 cp -Lf -t "$T"
+    /usr/bin/c_rehash "$T"
+done