diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2018-09-17 16:28:58 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2018-09-17 16:28:58 +0100 |
| commit | 570cb1bdbc6ea378b2dcaf6ebabb45a5610ed1ef (patch) | |
| tree | 8d5da6ce3df0945e66b48e9a624984a54800c4d7 /doc | |
| parent | ebda598a4af7ead204e1f611ec066bb678a275d5 (diff) | |
DANE: fix TA-mode verify under GnuTLS. Bug 2311
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-txt/ChangeLog | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index f93622bf9..5a04b1bdc 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -113,13 +113,18 @@ JH/23 Bug 2318: Fix the noerror command within filters. It wasn't working. was not set for later routers. Investigation and fix by Matthias Kurz. JH/24 Bug 2310: Raise a msg:fail:internal event for each undelivered recipient, - and a msg:complete for the whole, when a message is manually reoved using + and a msg:complete for the whole, when a message is manually removed using -Mrm. Developement by Matthias Kurz, hacked on by JH. JH/25 Avoid fixed-size buffers for pathnames in DB access. This required using a "Gnu special" function, asprintf() in the DB utility binary builds; I hope that is portable enough. +JH/26 Bug 2311: Fix DANE-TA verification under GnuTLS. Previously it was also + requiring a known-CA anchor certificate; make it now rely entirely on the + TLSA as an anchor. Checking the name on the leaf cert against the name + on the A-record for the host is still done for TA (but not for EE mode). + Exim version 4.91 ----------------- |