Re: Password length restriction

Am 15.07.20 um 19:02 schrieb Eike Lantzsch:
> If you don't mind my AOL-post ...
> There are some distributions which are not including any recent
> fetchmail version.
> I really don't get it why e.g. openSuse comes with 6.3.26 fetchmail.
> If mayor producers of Linux Distros are going on with this practice
> questions like the one of the OP are bound to appear again and again.
> It seems to be a widely common assumption that the latest distro comes
> with the latest ports - not at all, not at all.
> Not good.

So be it, we'll politely tell people that the official support list is
for officially supported releases (meaning the 6.4.X series at the time
of writing), and what they (the users) make of that depends a bit on
their skills and how much effort they want to spend.

> Not long ago OpenBsd e.g. was still with 6.3.xx when 6.4.xx was already
> available upstream. Now OpenBSD 6.7 Release comes with 6.4.3.

OpenBSD is a different story, their LibreSSL isn't up to speed with
TLSv1.3. So it works with fetchmail 6.4.x, but not with 6.5.x (for
instance beta1), as of OpenBSD 6.7. Their base system libressl isn't up
to speed with TLS v1.3 which fetchmail 6.5 (a future release) will
require, in the form of requiring the OpenSSL 1.1.1 API as well. I know
the OpenBSD/LibreSSL are working on TLSv1.3, but it's not there yet.

Otherwise someone else port fetchmail 6.5.x to OpenBSD's OpenSSL port,
which is packaged so far differently from everything I've seen that I
won't bother supporting it in fetchmail upstream with libecrypt libessl
and whatnot.
OpenBSD need to get their act together anyways. They forked OpenSSL into
LibreSSL due to security issues, but don't deliver on up-to-date
protocols. It's a bit of an inconsistent impression they are leaving
with me.

> At least on OpenBSD compiling the latest upstream version fo fetchmail
> is straight forward and easy.
Yes, for the recent OpenBSD versions and fetchmail 6.4.x (which
tolerates OpenSSL 1.0.2 and compatible libraries).
> On Linux I don't know but would be worth a try.
I routinely test on recent Fedora and Ubuntu Linux and on FreeBSD, and
occasionally on OpenBSD and I've tested with OpenIllumos Hipster which
just crashed into a "disk full" condition in my virtual machine when
trying to upgrade. No-one told me I'd need to keep 8 GB for updates. ;)
> Anyway I admire your patience giving a helpful answer despite the OP's
> question based on outdated software.
I had to learn that part. ;)