summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-05-05tidyingJeremy Harris
2018-05-03Fix typo in readconf.cHeiko Schlittermann (HS12-RIPE)
2018-05-01Expansions: new ${lheader:<name>}. Bug 2272Jeremy Harris
2018-04-29tidyingJeremy Harris
2018-04-28Docs: minor fixesJeremy Harris
2018-04-25ARC: add $arc_oldest_pass variable, for verifyJeremy Harris
2018-04-25ARC: support $arc_domains also for verify failsJeremy Harris
2018-04-24ARC: add $arc_domains variable, for verify passJeremy Harris
2018-04-24ARC: limit verify chain to 50-deepJeremy Harris
2018-04-23Testsuite: syslog testcaseJeremy Harris
2018-04-23DKIM: enforce limit of 20 on received DKIM-Signature: headers. Bug 2269Jeremy Harris
2018-04-21Improve OpenSSL/GnuTLS; enable DNSSEC for non-smarthostPhil Pennock
2018-04-21Docs: clarify DKIM verificationJeremy Harris
2018-04-20TLS by default for example smarthost SMTP TransportPhil Pennock
And _decent_ TLS at that, with verification.
2018-04-18Testsuite: output changes arising.Jeremy Harris
Broken-by: 0e8aed8aab
2018-04-18ACL: reword error message for ratelimit. Bug 2267Jeremy Harris
2018-04-18Docs: rewrite description of 'leaky' ratelimit. Bug 1298Jeremy Harris
2018-04-18Fix specHeiko Schlittermann (HS12-RIPE)
Thanks to Mike Brudenell
2018-04-17Compile warning defaults for OpenBSD, at request of the port maintainerJeremy Harris
2018-04-16tidyingJeremy Harris
2018-04-16Belated README.UPDATING notes for Exim 4.91Phil Pennock
People skip versions and move past them later, so while it's too late for 4.91, this will still help people moving to 4.92 from pre-4.91 in future. Note that none of these strictly needed to be documented here: experimental features, features marked as deprecated for many many years, etc. But let's err on the side of caution and include "things which will break if you try to upgrade without changing Local/Makefile".
2018-04-16Fix OpenSSL non-OCSP buildJeremy Harris
2018-04-16Fix merge artifactsJeremy Harris
2018-04-16Testsuite: output changes arisingJeremy Harris
Broken-by: 777e3beace
2018-04-16Fix typo in arc. Bug 2262Jeremy Harris
2018-04-15Enable weak/old stuff in OpenSSLPhil Pennock
Configure OpenSSL with: enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers Include explanation as to why.
2018-04-15Testsuite: syslog testcaseJeremy Harris
2018-04-15Merge branch '4.next'Jeremy Harris
2018-04-15Tidy logging codeJeremy Harris
2018-04-15Clear more globals between messagesJeremy Harris
2018-04-15Add client-ip info to iprev ${authres } lineJeremy Harris
2018-04-15ARC: add optional x= tag to signingJeremy Harris
2018-04-15ARC: add optional t= tags to signingJeremy Harris
2018-04-15Avoid doing logging in signal-handlers. Bug 1007Jeremy Harris
2018-04-15Docs: clean for next releaseJeremy Harris
2018-04-15Testsuite: tidyup after myslq testingexim-4_91Jeremy Harris
2018-04-14Logging: fix syslog logging for syslog_timestamp=no and log_selector +millisecJeremy Harris
also syslog_pid=no and log_selector +pid
2018-04-14Docs: typoJeremy Harris
2018-04-14Logging: fix syslog logging for syslog_timestamp=no and log_selector +millisecJeremy Harris
2018-04-13DKIM downgrade example again; this time debuggedPhil Pennock
As well as previous commit's `len_3` -> `length_3`, we were missing braces around the expansion operator, resulting in trying to dereference an unknown variable `$length_3`, and we were missing the outer braces from the `or` expansion condition. We really need a better way to test ACL expansion without a full harness. :( This bug-fixed version is now running on my system.
2018-04-13Fix length expansion operator in DKIM downgrade examplePhil Pennock
2018-04-13DKIM: add support for the SubjectPublicKeyInfo wrapped form of pubkeyJeremy Harris
2018-04-12Docs: add known broken-version info for OpenSSL behaviorJeremy Harris
2018-04-11Mention MTA-STS in DANE context; nit fixesPhil Pennock
Did an audit of text changed since commit 6aa6fc9c5 to look for issues which stood out, fixed those. Spelling mistakes, markup issues, minor grammatical infelicities. The public/private CA stuff in the DANE text might push people away from public CAs, but the existence of MTA-STS means that one of those is probably the best choice. Mention what exim.org does, to provide slightly firmer guidance without pressure. List the `dkim_hash` values, `sha512` appears to be new since that text was last touched.
2018-04-11Doc: website updates and so forthPhil Pennock
I've added <https://downloads.exim.org/> as a new vhost which doesn't reference FTP and loses the `/pub/exim` prefix. Fixed various other outdated claims and documented Jeremy's PGP key as the main key for releases, with mine (Phil's) and Heiko's as fallbacks. Mention the `.xz` files.
2018-04-09Add `receive_time` to list of log_selector valuesPhil Pennock
2018-04-09bugfix: heimdal interaction, check lengthPhil Pennock
clang noted that taking the address of a struct member will never be 0, so checking against 0 was wrong. It was a `.length` member. I've compiled RC4 with this change and deployed it to my box and I can still authenticate fine.
2018-04-09ARC: fix signing when DKIM-signing is also being doneJeremy Harris
The ordering of headers being signed was wrong when a message being forwarded arrived with a dkim signature
2018-04-09DMARC: fix history fileJeremy Harris
Too many variables were being cleared between connections Broken-by: c780096c29 4.91 RC2
2018-04-08Better(?!?) fallback for stat: PerlPhil Pennock
We use Perl extensively in other scripts. *sigh*