summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-06-28Update Changelog about -p/-oMrHeiko Schlittermann (HS12-RIPE)
2017-06-27Fix ChangeLog notice re manualroute option orderingPhil Pennock
We do *NOT* permit options before hostnames. It's always hostnames before options. It's _within_ the options that the use of a transport name as an option name had been accidentally constrained to come last, which was then fixed in commit 833c70bc. I goofed in describing this.
2017-06-27Fix appendfile.c errmsg output that broke with d291c7Heiko Schlittermann (HS12-RIPE)
2017-06-26Repair manualroute transport name not-last optionPhil Pennock
Commit 55414b25b did const-ification surgery which removed the old "temporarily drop a NUL in here" anti-pattern, but one of the Ustrcmp->Ustrncmp conversions was missed, for transport-name comparison. As a result, since Exim 4.85, we've had an undocumented requirement-by-bug that the transport name be the last such option given. Restore old behaviour. Still missing a test-case to deter regression.
2017-06-25Bail out if a configuration file starts with a byte order markHeiko Schlittermann (HS12-RIPE)
2017-06-25Fix what d291c7670e4c370cdc4f631ea58f82c7f4f87823 broke. Closes 1115Heiko Schlittermann (HS12-RIPE)
2017-06-25Add quota/quota_filecount transport option modifier "no_check" Bug 1115Heiko Schlittermann (HS12-RIPE)
This option modifier allows to ignore the quota limits, but update the maildirsize file.
2017-06-25Doc: check for w3m existenceHeiko Schlittermann (HS12-RIPE)
w3m is called as non-last command in pipelines. A missing w3m creates empty output and Make doesn't get it, because the last command of the pipe (e.g. Tidytxt) doesn't return failure on empty input.
2017-06-13When pipelining under TLS do not treat fd-readability as tls-readabilityJeremy Harris
2017-06-13Add compile-time checks on expanding-string function useJeremy Harris
2017-06-13Cleanup (prevent repeated use of -p/-oMr to avoid mem leak)Heiko Schlittermann (HS12-RIPE)
2017-06-13Fix log line corruption for DKIM statusHeiko Schlittermann (HS12-RIPE)
2017-06-11On a continued-transport delivery, do not check the hostlist for mismatch in theJeremy Harris
transport dispatch level when the transport does hosts-override. Instead do the full trasport process call and let it decide on compatibility with the connection.
2017-06-11In tls-proxy process take case to close unused pipe ends, select also for ↵Jeremy Harris
exception conditions on data fds
2017-06-11Testsuite: testcase for continued-delivery with transport hosts_overrideJeremy Harris
2017-06-03Fix logging of delivery port for callout lazy-close, when port specified by ↵Jeremy Harris
router
2017-06-03Testsuite: stabilize output sequence for 2x35/6Jeremy Harris
2017-06-03Docs: tweak "sock" malware interface descriptionJeremy Harris
2017-06-03Fix crash in transport, on second smtp-connect fail for a list of target hostsJeremy Harris
Reported as the sequence: 1MX: 554 on connect (banner) 2MX: TCP conn timeout
2017-06-02Docs: add missing dollarsignJeremy Harris
2017-05-31Testsuite: stabilize output sequence for case 4530Jeremy Harris
2017-05-30Testsuite: stabilize output sequence for case 0906Jeremy Harris
2017-05-30Malware: make "sock" cmdline default usable. Bug 2111Jeremy Harris
2017-05-26doc: string2 not expanded, don't imply otherwisePhil Pennock
A simple reading which skips the later paragraph would mislead people; this was remnant text from before the EXPAND_LISTMATCH_RHS changed the default behaviour. A couple of paragraphs later we contradicted this now-misleading parenthetical, but that's not enough. Nuke it.
2017-05-25typoJeremy Harris
2017-05-21TLS: do not use DH_bits for LibreSSL; it is not supported (as of LibreSSL 2.3.2)Jeremy Harris
2017-05-21Debug: more info during server-side authenticationJeremy Harris
2017-05-21OpenSSL: add sender_host_address info to certificate verify error log ↵Jeremy Harris
messages when in verify callout
2017-05-20Use DH_bits for OpenSSL 1.1.0Phil Pennock
Fixes bug 2095
2017-05-19TLS: PIPELINING under OpenSSLJeremy Harris
2017-05-17Testsuite: delays in 2x3[567]Jeremy Harris
2017-05-17Testsuite: add delays for predictable log sequencing in 2x36, log-sorting ↵Jeremy Harris
for 2x38
2017-05-17TLS: do decent PIPELINING under TLS, at least with GnuTLSJeremy Harris
I've not found an equivalent in OpenSSL of gnutls_record_cork() nor gnutls_record_check_pending() yet.
2017-05-14Revert "DANE: do not trust a non-dnssec NXDOMAIN return for the TLSA lookup"Jeremy Harris
This reverts commit 5d6bdf01a921a88030e9baec7ba5f238da90e979.
2017-05-09Add option commandline_checks_require_adminPhil Pennock
May help with scenarios already so broken that bug report 2118 is actually an issue (Wordpress vuln).
2017-05-07Testsuite: add DANE cases for DNS secure no-TLSA lookupsJeremy Harris
2017-05-07Testsuite: add DANE testcase for TLSA lookup SERVFAILJeremy Harris
2017-05-07DANE: do not trust a non-dnssec NXDOMAIN return for the TLSA lookupJeremy Harris
2017-05-07DANE: avoid info leak by checking TLSA dnssec before connecting to MXJeremy Harris
2017-05-07tidyingJeremy Harris
2017-05-07Testsuite: fix fakens to not claim that an unsupported NXDOMAIN is dnssec-ADJeremy Harris
2017-05-06Enable use of sendfile on FreeBSDJeremy Harris
2017-05-06Enable use of sendfile on FreeBSDJeremy Harris
2017-05-06Teach SMTP input sync check ("input sent too soon") about SMTP input bufferingJeremy Harris
2017-05-06Docs: add note on Received-By: header creation under cutthroughJeremy Harris
2017-05-04testsuite: tidyingJeremy Harris
2017-05-04CHUNKING / wire-format spool: use block-copies for receiptionJeremy Harris
2017-05-01testsuite output changesJeremy Harris
2017-05-01testsuite: tidyingJeremy Harris
2017-05-01tidying: coverityJeremy Harris