summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-05-04More tls_sni support: outbound, logging.Phil Pennock
tls_sni as SMTP transport option. Use correct storage pool for copying tls_sni, so survives for life of process. Add +tls_sni log-selector, for inbound tls_sni. Update exipick to handle -tls_sni in spool files. Also reset tls_bits at start of outbound connection (was missing).
2012-05-04TLS SNI support for OpenSSL ($tls_sni)Phil Pennock
2012-05-03Guard loadable module vars with LOOKUP_MODULE_DIR.Phil Pennock
Fixes compiler complaints about unused variables.
2012-05-03spurious compiler warning of unused var fixPhil Pennock
(but added check in case wrong about spuriousness)
2012-05-03OpenSSL fixes and backwards compat break.Phil Pennock
Drop SSL_clear() after SSL_new() which causes protocol negotiation failures for TLS1.0 vs TLS1.1/1.2 in OpenSSL 1.0.1b. Remove SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS (+dont_insert_empty_fragments) from default of openssl_options.
2012-05-03LDAP: Check for errors of TLS initialisationPhil Pennock
Report and patch from Dmitry Banschikov.
2012-05-01Update testsuite output files for GnuTLS version update and fixes.Jeremy Harris
2012-05-01Code refactoring in acl.c (bug 1184)Jeremy Harris
Move to a table-driven approach for the parsing of "verify =".
2012-05-01Change notes for bug 660.Jeremy Harris
2012-05-01Return multi-values attributes from an LDAP lookup in parsable form (bug 660).Jeremy Harris
2012-04-30document TK's bug 1239 fix in ChangeLogPhil Pennock
2012-04-30Fix verification when DKIM Signatures are not inserted as tracking headers. ↵Tom Kistner
Thanks to Wolfgang Breyha for the patch! (bug 1239)
2012-04-29Include string_interpret_escape() in COMPILE_UTILITY cases.Jeremy Harris
Eximon needs it, via util-spool_in.o It needed a private hex_digits[] to avoid bringing in all of globals.c to COMPILE_UTILITY.
2012-04-28include string_unprinting() in COMPILE_UTILITY cases.Phil Pennock
jgh debugged eximon build failure; util-spool_in.o needs it
2012-04-28TLS fixes for OpenSSL.Phil Pennock
Support TLS 1.1 & 1.2 New "openssl_options" values (all now documented). Set SSL_MODE_AUTO_RETRY so that OpenSSL will retry a read or write after TLS renegotiation, which otherwise led to messages "Got SSL error 2".
2012-04-28describe spool file changes for -tls_peerdnPhil Pennock
2012-04-27Handle \n in tls_peerdn for spool files.Phil Pennock
Fixes bug 1240.
2012-04-26Fix testsuite case 0373.Jeremy Harris
The subtest does a readsocket (with 1s timeout) into a server which closes immediately. The expected output in the testcase was null, the output actually seen was the error-return expansion, which seems more correct. Accepting the actual output.
2012-04-25New testcase output from SSL library.Jeremy Harris
2012-04-25Add ACL name to debug output of condition result (bug 1238).Jeremy Harris
2012-04-23Ensure $smtp_command is initialized before it can be expanded (bug 1182).Jeremy Harris
2012-04-23Add pointer to IPv6 support in prototype Makefile (bug 1232).Jeremy Harris
2012-04-23Update testsuite case enabled by fix for bug 1227, with changes require by ↵Jeremy Harris
bug 1224.
2012-04-22Always init_lookup_list before readconf_main.Phil Pennock
This happens while still root. Be more emphatic in EDITME about the security implications of loadable modules.
2012-04-22Better ls output fixing.Phil Pennock
fixes bug 1226 Further investigation from Jeremy Harris showed the previous fix left trailing whitespace on output which previously ended after the permission bits (eg, test 0240). This works better for me.
2012-04-22Merge branch 'master' of git://git.exim.org/eximJeremy Harris
2012-04-22Mark cases where printf format strings are usedDirk Mueller
Bug report from Lars Müller <lars@samba.org> (via SUSE), Patch from Dirk Mueller <dmueller@suse.com>
2012-04-22Bug 1224: fixup testsuite case output from testdb.Jeremy Harris
2012-04-22Add testsuite case retry (without update) option on failed file compare.Jeremy Harris
2012-04-22Accept change in testcase munged output for -btJeremy Harris
Trailing spaces were trimmed by commit 37acd760db
2012-04-19Bug 1224 followon - avoid breaking other testcases.Jeremy Harris
Add specific patterns to avoid when munging the output. This is fragile and may still be broken outside my specific test environment.
2012-04-19Fix bug 1224.Jeremy Harris
Replace the lookup index char in sterr traces with a zero; update testcase expected stderr files to match.
2012-04-18Fix bug 1229.Jeremy Harris
Update testcase output with now-expected info.
2012-04-17Testcase changes to match changes introduced by bug 1214.root
Additional "A=" authenticator info was added to log lines for rejections.
2012-04-16Merge remote branch 'origin'root
2012-04-12Handle TAB, not just SP, in MAIL args.Phil Pennock
Analysis, diagnosis and variant patch by Todd Lyons.
2012-04-12Updated OptionsList with gsasl, heimdal_gssapi, _PC changes.Phil Pennock
Also maildir_use_size_file is now expanded
2012-04-12Two clarifications.Phil Pennock
String expansion, draw more attention to &dagger; marking. Document the order in which parameters are supplied to relative comparators.
2012-04-02Fix IPv6 REroot
2012-03-31fix gsasl / cyrus claimsPhil Pennock
Point 1 for 4.78 said gsasl could *not* be used to replace cyrus. This was obsoleted by point 5. Remove claim from point 1, add additional note to point 5.
2012-03-30Handle alternate access method flag in ls.Phil Pennock
Jeremy Harris found ls output not parsing on SELinux systems. I identified this as SUSv3's "optional alternate access method flag". Jeremy wrote the patch, I adjusted a little. fixes bug 1226
2012-03-30set umaskPhil Pennock
fixes bug 1228
2012-03-30handle more of the new format version numbersPhil Pennock
2012-03-21Merge branch 'dbmjz'Phil Pennock
2012-03-21heimdal_gssapi: accept SASL with empty authzidPhil Pennock
Saw this happening with Apple Mail; accept it, dup the GSS Display Name
2012-03-02Add dbmjz lookup typePhil Pennock
2012-02-19Log auth data in rejectlog.Phil Pennock
http://bugs.exim.org/attachment.cgi?id=547&action=edit fixes bug: 1214 Patch by Jeremy Harris
2012-02-18expand cyrus_sasl server_realm optionPhil Pennock
2012-02-18Merge branch 'sasl_fixes'Phil Pennock
2012-02-18Use gsasl_property_fast() in property callback.Phil Pennock
Avoids the loops which we only cancel out anyway.