summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-06-03Cyrus SASL: set host;port properties on auth driverPhil Pennock
2012-06-03copyright yearPhil Pennock
2012-06-03DSCP: inbound via control = dscp/<value>Phil Pennock
2012-06-02Docs: pipes in redirect, need for quote cautionPhil Pennock
2012-06-02Christof Meerwald (for patches in bug 1095)Phil Pennock
2012-06-02DSCP: take numeric values too.Phil Pennock
Also fix doc claim that value is unexpanded. Also strip affix whitespace before numeric conversion and fixed string comparison.
2012-06-02FreeBSD is ELF and has been for a long timePhil Pennock
2012-06-02DSCP: document; hex print; -bI:dscpPhil Pennock
2012-06-01DSCP support, tentativePhil Pennock
2012-06-01DNSSEC babystep: dns_use_dnssec & $sender_host_dnssecPhil Pennock
2012-06-01improve PH entry, per Bill Hacker's suggestionPhil Pennock
2012-06-01ACKNOWLEDGEMENTS update, covering a few yearsPhil Pennock
2012-06-01tls_dh_min_bits smtp transport optionPhil Pennock
Could not find an API for use with OpenSSL, so GnuTLS only
2012-06-01Make -n combine with -bP to inhibit namesPhil Pennock
2012-06-01Add -bI:help and -bI:sievePhil Pennock
2012-05-31Doc: drop .new/.wen, update previousversion.Phil Pennock
Also, drop fix one place which claimed TLS SNI support was OpenSSL only.
2012-05-30Revert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512."exim-4_80Phil Pennock
This reverts commit 83f4c7515f3eb06dc070e78edd2694c1d088e5fd. This was not a new check! The call to gnutls_dh_set_prime_bits() was made with DH_BITS in Exim 4.77, so the only difference is that now an administrator can choose at compile time to change the lower bound. So keeping this at 1024 is not a regression and if we can't talk to them now, we couldn't before, and we shouldn't lower security by default. The reverted commit was only acceptable IF it was still better than what we had in Exim 4.77.
2012-05-30Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512.Phil Pennock
Wolfgang Breyha saw a real-world site using 768 bits.
2012-05-28Merge openssl_disable_ssl2 branchexim-4_80_RC7Phil Pennock
2012-05-27typo fix: "overriden" -> "overridden" from Andreas MetzlerPhil Pennock
2012-05-27release: don't try to sign .tar.lz filesPhil Pennock
2012-05-27Test: update for new tls_dhparam (suite used on Scientific Linux 6 test host).Jeremy Harris
2012-05-27Doc: fix glitchexim-4_80_RC6Phil Pennock
2012-05-27Test: update for new tls_dhparamPhil Pennock
2012-05-27Doc: SECTgnutlsparam referencing tls_dhparamPhil Pennock
2012-05-27For DH, use standard primes from RFCsPhil Pennock
2012-05-27">" -> ">=" for EXIM_CLIENT_DH_MIN_BITS+10Phil Pennock
2012-05-27Deal with GnuTLS DH generation overshootPhil Pennock
2012-05-26FAQ for GnuTLSPhil Pennock
2012-05-26teach sprint_vformat() size_t z modifier (jgh)Phil Pennock
Jeremy wrote this, mostly; I just fixed up a comment and pedantically numbered the enum values
2012-05-26fix size param for gnutls_dh_params_export_pkcs3() againPhil Pennock
2012-05-25Ignore vim swap files and test/* temporary files/dirsTodd Lyons
2012-05-25release: no .lz by default for nowPhil Pennock
2012-05-25Doc: Provide context for bare numbers from CHAP/SECT.Phil Pennock
2012-05-25Cyrus SASL auth: SSF retrieval was incorrect.Phil Pennock
Exim thought protection layer was required, which is not implemented. Patch from Wolfgang Breyha. Fixes bug 1254
2012-05-25It's 2012, not 1012. Noted by Jay RoumanPhil Pennock
2012-05-24Added some more .gitignore entriesNigel Metheringham
Ignore more build side effects
2012-05-24Moved pdkim declaration to satisfy older compilersNigel Metheringham
As suggested by Dennis Davis to fix an error with gcc 2.95.2 which threw the following error:- gcc pdkim.c pdkim.c: In function `pdkim_feed_finish': pdkim.c:1389: parse error before `*' pdkim.c:1390: `hdrs' undeclared (first use in this function) pdkim.c:1390: (Each undeclared identifier is reported only once pdkim.c:1390: for each function it appears in.) gmake[2]: *** [pdkim.o] Error 1 See https://lists.exim.org/lurker/message/20120524.094800.89928246.en.html
2012-05-24ReleaseTools: support .lz lzip archivesPhil Pennock
2012-05-23_ISOC99_SOURCE -> _GNU_SOURCEexim-4_80_RC5Phil Pennock
_ISOC99_SOURCE broke build on Linux (Ubuntu 11.10) because it broke <resolv.h>, <arpa/nameser.h>, etc. Their u_char and u_int usage relies upon BSD source being enabled too. So use _GNU_SOURCE.
2012-05-23Define _ISOC99_SOURCE in exim.hPhil Pennock
Done before os.h is pulled in so an OS can override it.
2012-05-23Doc: move -bmalware into alphabetic placePhil Pennock
2012-05-23Doc: s/DNS/domains/ in new textPhil Pennock
2012-05-23Doc: document when dnslookup will declinePhil Pennock
2012-05-23Doc: tls_require_ciphers examplesPhil Pennock
Note how to test strings, provide examples which distinguish port 25 from other ports. Carefully used short examples, but allows two different strings per implementation and demonstrates how the strings are very different.
2012-05-23Manually control locale, setting to "C" in runtest script.Todd Lyons
Fixes the output of 'ls' command to a standard format (test 345).
2012-05-23expanded comment, noting size types and API issuePhil Pennock
2012-05-22README.UPDATING: emphasise more the LDAP issuePhil Pennock
2012-05-22OCSP description: minor nitsPhil Pennock
2012-05-21Enable PCRE_CONFIG by defaultPhil Pennock
With this, src/EDITME as Local/Makefile *only* needs EXIM_USER to be set and EXIM_MONITOR commented out for Exim to build on my box. I think this is a reasonable default; if there are releases of PCRE which do not include pcre-config, then on those boxes a slight change will be needed, but only where the file was already having to be edited anyway.