summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-04-08stat portabilityPhil Pennock
I forgot how much I loathe basic stuff like "get the size of a file, portably, in shell". Bleh.
2018-04-08Added util/renew-opendmarc-tlds.sh script to renew PSLPhil Pennock
2018-04-08OpenSSL: Revert the disabling of the session-cache. Bug 2255Jeremy Harris
Session cacheing is never useful, as we use a new context for every TLS startup. However, removing the support triggers odd behaviour from Outlook Express (only when there is an IMAP server on the same machine as Exim): an initial connect from the OE client fails, the immediate retry works.
2018-04-07ARC: fix verify to not evaluate the top AMS twiceexim-4_91_RC4Jeremy Harris
2018-04-06Logging: fix DKIM precis received log line element.Jeremy Harris
Broken-by: 2c47372fad
2018-04-04compiler quieteningHeiko Schlittermann (HS12-RIPE)
2018-04-04compiler quieteningJeremy Harris
2018-04-04Actually reap node2 process in redis cluster testGraeme Fowler
2018-04-02Avast: rework interfaceexim-4_91_RC3Heiko Schlittermann (HS12-RIPE)
2018-04-02Avast: implement pass_unscanned optionHeiko Schlittermann (HS12-RIPE)
2018-04-02Avast: improve compliance with avast-protocol(5)Heiko Schlittermann (HS12-RIPE)
Treat scanner errors as malware. Defer on scanner tmpfail only.
2018-03-31Testsuite: ignore config-optional -bP outputJeremy Harris
2018-03-31Docs: tidy the ChangeLog fileJeremy Harris
2018-03-30Merge branch 'dane_require_tls_ciphers'Phil Pennock
New SMTP Transport option for simplified improved security for DANE.
2018-03-30Testsuite: avoid ipv6 use in dane_require_tls_ciphers testcasesJeremy Harris
2018-03-30Testcases for dane_require_tls_ciphersJeremy Harris
2018-03-28Implement dane_require_tls_ciphers (theoretically)Phil Pennock
It compiles with OpenSSL, on Darwin (if restore Darwin OS). It doesn't crash immediately, but more testing is needed from a place where port 25 is not just blocked.
2018-03-28Document new dane_require_tls_ciphersPhil Pennock
Haven't written the code yet, but writing the docs first helped me affirm that this makes sense and feels clean. Code in next commit.
2018-03-28ARC: log signing-spec errors in mainlog only, not paniclogJeremy Harris
2018-03-27ARC: enhance debug for signing; explicitly init signing contextJeremy Harris
2018-03-26Fix non-ARC buildJeremy Harris
2018-03-26ARC: add guard in verify against lack of the dkim-verify contextJeremy Harris
needed for body-hashing
2018-03-26Cutthrough: for an onward finaldot timeout, generate an initator 450 in ↵Jeremy Harris
defer=pass mode
2018-03-26ARC: cutthrough delivery may not be used with ARC signingJeremy Harris
2018-03-26Cutthrough: enforce non-use in combination with DKIM signing or transport filterJeremy Harris
Broken-by: 02b41d7106
2018-03-26Add ARC signing caveatsPhil Pennock
2018-03-26SPF: remove the deprecated "err_temp" and "err_perm" result namesJeremy Harris
2018-03-26DKIM: document proper Ed25519 key-generation methods; remove helper programJeremy Harris
2018-03-26Expand directory opetion for queuefile transportJeremy Harris
2018-03-26Remove extraneus line - benign but pointless.Jeremy Harris
Broken-by: 9e70917d0a
2018-03-25Testsuite: for SPF tests, avoid using the ipv4 addressJeremy Harris
2018-03-25Add non-mtp source info to ${authres }Jeremy Harris
2018-03-25DKIM: document generation of RSA keysJeremy Harris
2018-03-25DKIM: document Ed25519 private key generation under OpenSSL (1.1.1+)Jeremy Harris
2018-03-25DKIM: move ed25519_privkey_pem_to_pubkey_raw_b64 to src/util/ and add usage ↵Jeremy Harris
notes to docs
2018-03-25Docs: more on ${authresults }Jeremy Harris
2018-03-24ARC: give more detail with "bad signing-spec" messageJeremy Harris
2018-03-24Mark variables that are unused before release of store in the queue-list loopJeremy Harris
2018-03-23Address jgh notes re OpenSSLPhil Pennock
* `/usr/local` is fair, on Linux, but I deliberately picked something specific to OpenSSL to make the context clear and limit bad interactions with other locally-installed software. * `RPATH` and `RUNPATH` are not the same and are deeply twisty in their interactions. <https://blog.qt.io/blog/2011/10/28/rpath-and-runpath/> is a decent summary.
2018-03-23ARC: For signing, accept A-R header lacking ARC info as equivalent to "none"Jeremy Harris
2018-03-23Docs: typoJeremy Harris
2018-03-23Fix spool_wireformat final-dot on LMTP transport. Bug 2258Jeremy Harris
Broken-by: 328c5688db
2018-03-23ARC: add independent-source testcase. Fix signatures by not line-terminatingJeremy Harris
last header line being hashed.
2018-03-23exiqsumm fix: Check @ARGV exists before testing itGraeme Fowler
2018-03-22Set a TERM handler to terminate properly if running as PID 1Heiko Schlittermann (HS12-RIPE)
2018-03-22SPF: additional variable $spf_result_guessed; tweak authresults string ↵Jeremy Harris
indicating guess
2018-03-21Pipe transport, part two. Bug 2257exim-4_91_RC2Jeremy Harris
2018-03-21ARC: AS header should have no c= tagJeremy Harris
2018-03-21ARC: on the smtp transport option take empty or forced-fail to disable signingJeremy Harris
2018-03-20Not all the world is binutils ldPhil Pennock
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-05 21:10:52 +0000