[ssmtp] validate the TLS server

[wolfy]

commit 1a3e1688aec85e23aa6719c73bd76f7545685cbb
Author: Manuel Wolfshant <wolfy at fedoraproject.org>
Date:   Sat Oct 13 06:57:17 2012 +0300

    validate the TLS server

 ssmtp-aliases.patch           |    2 +-
 ssmtp-default-cert-path.patch |   24 ------------------------
 ssmtp.spec                    |   12 +++++++++---
 3 files changed, 10 insertions(+), 28 deletions(-)
---
diff --git a/ssmtp-aliases.patch b/ssmtp-aliases.patch
index 024ea75..36ef2a7 100644
--- a/ssmtp-aliases.patch
+++ b/ssmtp-aliases.patch
@@ -150,7 +150,7 @@ diff -up ssmtp-2.61/ssmtp.8.old ssmtp-2.61/ssmtp.8
  	else if(strcmp(prog, "newaliases") == 0) {
  		/* Someone wanted to rebuild aliases */
 -		paq("newaliases: Aliases are not used in sSMTP\n");
-+		paq("newaliases: Aliases are used read from a text file in sSMTP\n");
++		paq("newaliases: In sSMTP aliases are read from a plain text file\n");
  	}
  
  	i = 1;
diff --git a/ssmtp.spec b/ssmtp.spec
index 763e2e7..5dedbc6 100644
--- a/ssmtp.spec
+++ b/ssmtp.spec
@@ -1,6 +1,6 @@
 Name:		ssmtp
 Version:	2.64
-Release:	4%{?dist}
+Release:	5%{?dist}
 Summary:	Extremely simple MTA to get mail off the system to a Mailhub
 Group:		Applications/Internet
 License:	GPLv2+
@@ -21,9 +21,10 @@ Patch10:	%{name}-aliases.patch
 # add X-Originating-IP field
 #http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=557741
 Patch11:	%{name}-remote-addr.patch
+Patch12:	%{name}-validate-TLS-server-cert.patch
 
 #fixes for Fedora PATHs
-Patch20:	%{name}-default-cert-path.patch
+#Patch20:	%{name}-default-cert-path.patch // merged in validate-TLS-server-cert.patch
 Patch21:	%{name}-defaultvalues.patch
 
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -58,7 +59,8 @@ or manage a queue. That belongs on a mail hub with a system administrator.
 %patch2 -p1 -b .garbage
 %patch10 -p1 -b .aliases
 %patch11 -p1 -b .remote-ip
-%patch20 -p1 -b .pki
+%patch12 -p1 -b .tls
+# %patch20 -p1 -b .pki
 %patch21 -p1 -b .saneconf
 
 %build
@@ -135,6 +137,10 @@ fi
 
 
 %changelog
+* Sat Oct 13 2012  Manuel "lonely wolf" Wolfshant <wolfy at fedoraproject.org> - 2.64-5
+- Optional separation of TLS client key and certificate files
+- Add patch enabling verification of TLS server (  #864894 )
+
 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.64-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild