Skip to content

dovecot: avoid testing DES-encrypted passwords#222022

Merged
vcunat merged 1 commit intoNixOS:staging-nextfrom
vcunat:p/dovecot-crypt
Mar 20, 2023
Merged

dovecot: avoid testing DES-encrypted passwords#222022
vcunat merged 1 commit intoNixOS:staging-nextfrom
vcunat:p/dovecot-crypt

Conversation

@vcunat
Copy link
Copy Markdown
Member

@vcunat vcunat commented Mar 19, 2023

Those tests wouldn't work since #220557

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.05 Release Notes (or backporting 22.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@vcunat
Copy link
Copy Markdown
Member Author

vcunat commented Mar 19, 2023

Dovecot maintainers should confirm that dropping DES support here shouldn't cause trouble in practice: @fpletz, @globin, @ajs124.

@vcunat
Copy link
Copy Markdown
Member Author

vcunat commented Mar 19, 2023

Perhaps you'd like to also like to add dovecot to the list of packages explicitly mentioned in release notes?

@ofborg ofborg bot requested review from ajs124, fpletz and globin March 19, 2023 14:39
@ofborg ofborg bot added 10.rebuild-darwin: 1-10 This PR causes between 1 and 10 packages to rebuild on Darwin. 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux. labels Mar 19, 2023
@ajs124
Copy link
Copy Markdown
Member

ajs124 commented Mar 20, 2023

Perhaps you'd like to also like to add dovecot to the list of packages explicitly mentioned in release notes?

Sounds like a good idea.

@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: changelog This PR adds or changes release notes 8.has: documentation This PR adds or changes documentation labels Mar 20, 2023
@mweinelt mweinelt mentioned this pull request Mar 20, 2023
6 tasks
Copy link
Copy Markdown
Member

@fpletz fpletz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When using a custom passwd/shadow file for dovecot, the command doveadm pw generates a bcrypt based hash by default - even before the libxcrypt changes. I don't think anyone still uses DES and if they do, they should upgrade anyways (e.g. because only the first 8 characters of the plain password are actually hashed).

@vcunat
Copy link
Copy Markdown
Member Author

vcunat commented Mar 20, 2023

IIRC the default changed at the start of dovecot-2.3, so something like 2017.

@vcunat vcunat merged commit f18e6d2 into NixOS:staging-next Mar 20, 2023

patchShebangs src/config/settings-get.pl

# DES-encrypted passwords are not supported by NixPkgs anymore
Copy link
Copy Markdown
Member

@SuperSandro2000 SuperSandro2000 Mar 21, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit *Nixpkgs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: changelog This PR adds or changes release notes 8.has: documentation This PR adds or changes documentation 10.rebuild-darwin: 1-10 This PR causes between 1 and 10 packages to rebuild on Darwin. 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants