Subject: Announce: OpenSMTPD 6.4.0 released OpenSMTPD 6.4.0 has just been released. OpenSMTPD is a FREE implementation of the SMTP protocol with some common extensions. It allows ordinary machines to exchange e-mails with systems speaking the SMTP protocol. It implements a fairly large part of RFC5321 and can already cover a large range of use-cases. It runs on OpenBSD, NetBSD, FreeBSD, DragonFlyBSD and Linux. The archives are now available from the main site at www.OpenSMTPD.org We would like to thank the OpenSMTPD community for their help in testing the snapshots, reporting bugs, contributing code and packaging for other systems. This is a major release with many breaking changes. Changes in this release (since 6.0.3): ====================================== - the configuration file syntax has been completely reworked, breaking compatibility with previous configuration files. - mda wrappers allow defining a command to pre-process mail before the mda write them to mailboxes. - OpenSMTPD now depends on LibreSSL as an SSL library and efforts will no longer be done to accomodate both OpenSSL and LibreSSL. - an SMTP client is now shipped with OpenSMTPD. - documentation has been reworked for the most part. - a lot of minor bug fixes and cleanups have been introduced. Checksums: ========== SHA256 (opensmtpd-6.4.0.tar.gz) = a14c7486557c0f6202efb800f509b418e56e9976a931473ebfaae2f0c5a24fbd SHA256 (opensmtpd-6.4.0p1.tar.gz) = 0857c14b5b4150daa4312cb0a85f41209792c83080beafc84ed0ddaaa985bde3 Verify: ======= Starting with version 5.7.1, releases are signed with signify(1). You can obtain the public key from our website, check with our community that it has not been altered on its way to your machine. $ wget https://www.opensmtpd.org/archives/opensmtpd-20181026.pub Once you are confident the key is correct, you can verify the release as described below: 1- download both release tarball and matching signature file to same directory: for OpenBSD version: $ wget https://www.opensmtpd.org/archives/opensmtpd-6.4.0.sum.sig $ wget https://www.opensmtpd.org/archives/opensmtpd-6.4.0.tar.gz for portable version: $ wget https://www.opensmtpd.org/archives/opensmtpd-6.4.0p1.sum.sig $ wget https://www.opensmtpd.org/archives/opensmtpd-6.4.0p1.tar.gz 2- use `signify` to verify that signature file is properly signed and that the checksum matches the release tarball you downloaded: for OpenBSD version: $ signify -C -e -p opensmtpd-20181026.pub -x opensmtpd-6.4.0.sum.sig Signature Verified opensmtpd-6.4.0.tar.gz: OK for portable version: $ signify -C -e -p opensmtpd-20181026.pub -x opensmtpd-6.4.0p1.sum.sig Signature Verified opensmtpd-6.4.0p1.tar.gz: OK If you don't get an OK message, then something is not right and you should not install without first understanding why it failed. Support: ======== You are encouraged to register to our general purpose mailing-list: http://www.opensmtpd.org/list.html The "Official" IRC channel for the project is at: #OpenSMTPD @ irc.freenode.net Reporting Bugs: =============== Please read http://www.opensmtpd.org/report.html Security bugs should be reported directly to security@opensmtpd.org Other bugs may be reported to bugs@opensmtpd.org