summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-24pipeHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit f9628406706112be459adb3f121db8e6cf282c2d)
2021-06-24autoreplyHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit 26de37d8960da80473866fb59b9dfd10a5761538)
2021-06-24rdaHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit a6da9c67acaee699616516be141d600cc178a633)
2021-06-24parseHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit 7eeeb6f26af05322814ecc77c87f09c72ab2216a)
2021-06-24aclHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit 44fd80ad8abcd885fc1c8dbb294fc2140e4ef481)
2021-06-24dbstuffHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit 35b11dd0e52b5ac176849f807cca8898bcaf0c3d)
2021-06-24searchHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit b71d675f695c2cf17357b190476129535d5f446c)
2021-06-24Introduce main config option allow_insecure_tainted_dataHeiko Schlittermann (HS12-RIPE)
This option is deprecated already now. (cherry picked from commit ec06d64532e4952fc36429f73e0222d26997ef7c)
2021-06-22GnuTLS: fix build with older GnuTLSJeremy Harris
The ALPN handling we need requires later features than the basic functions. Broken-byu: f50a063dc0
2021-06-22TLS: as server, reject connections with ALPN indicating non-smtp useJeremy Harris
2021-06-21Testsuite: fix testcases for non-TLS buildJeremy Harris
2021-06-21Testsuite: fix munging for no-TLS buildJeremy Harris
Broken-by: da40b1ec6b
2021-06-21Compiler quieteningJeremy Harris
Stupid static analysis failing to track crontrol dependencies
2021-06-19OpenSSL: on library versions too old to support session ticketsJeremy Harris
client-side limit the valid lifetime of resumable sessions
2021-06-19Testsuite: split out OpenSSL TLS1.3 resume testsJeremy Harris
Older library versions do not support 1.3 so a separate numbered testcase is needed
2021-06-19Testsuite: allow time for daemon to listen before terminatingJeremy Harris
2021-06-17OpenSSL: fix verify-certs stack initializationJeremy Harris
2021-06-17Testsuite: output changes for OpenSSL library variantsJeremy Harris
Broken-by: 2f8e0a5f6b
2021-06-17Docs: typoJeremy Harris
2021-06-15hosts_require_heloJeremy Harris
2021-06-13Testsuite: EC certJeremy Harris
2021-06-08Fix server creds cache invalidationJeremy Harris
Broken-by: 5fd673807d
2021-06-07compiler quieteningJeremy Harris
2021-06-07Re-fix non-Linux buildJeremy Harris
2021-06-06tidyingJeremy Harris
Vroken-by: ef77ddc923
2021-06-06Fix non-Linux buildJeremy Harris
2021-06-06Observability: listen queue backlogJeremy Harris
2021-06-06Testsuite: testcase for multiple listener sockets readyJeremy Harris
2021-06-06Avoid rescanning listen select setJeremy Harris
2021-06-06Compute select fd_set outside daemon loopJeremy Harris
2021-06-05Testsuite: fix OCSP/OpenSSL/1.3 testcaseJeremy Harris
2021-06-05Fix SSL creds file watching on kevent platforms (BSDs) for symlinksJeremy Harris
2021-06-04DMARC: note unsupported library versions issueJeremy Harris
2021-06-04debug: fix openssl outputJeremy Harris
2021-06-04Testsuite: regen certificates suite with fixed Authority IdentifierJeremy Harris
2021-06-03DKIM: under GnuTLS, permit weak algorithmsJeremy Harris
Recent versions of GnuTLS by default disallow use of some methods now regarded as weak. This probably mean sha1, which is deprecated per DKIM standards.
2021-06-03Testsuite: use higher-spec certs, for more-recent GnuTLS versions which ↵Jeremy Harris
deprecate weaker ones Needed for GnuTLS 3.6.15 (on Fedora 33)
2021-05-28tidyingJeremy Harris
2021-05-28Update testcase output to match newly applied default config limitJeremy Harris
Broken-by: f07847e436
2021-05-28Fix testsuite output for DB casesJeremy Harris
Broken-by: 186e99bafc
2021-05-28tidyingJeremy Harris
2021-05-28Logging: avoid pause during log-open under testsuiteJeremy Harris
It results in rearranged logging output, causing testsuite case failures The downside is that we lose debug visbility of the extra process startup Broken-by: b6c1434e47
2021-05-28Fix dmarc buildJeremy Harris
Broken-by: b6c1434e47
2021-05-28Docs: enhance section on redirect router :defer: & :fail:Jeremy Harris
2021-05-27Merge branch 'qualys-2020'Heiko Schlittermann (HS12-RIPE)
- all Qualys patches from 4.94.2 - all fixes from 4.94.2+fixes if not applied yet
2021-05-27Fix BDAT issue for body w/o trailing CRLF (again Bug 1974)Heiko Schlittermann (HS12-RIPE)
(cherry picked from commit 919111edac911ba9c15422eafd7c5bf14d416d26)
2021-05-27testsuite: reproduce BDAT with missing eol (Bug 1974)Heiko Schlittermann (HS12-RIPE)
(cherry picked from commit e9cecc465a570c1a4f34b199eae6bdd0a52ee2b0)
2021-05-27Cleanup docs on cve-2020-qualys, point to the Exim websiteHeiko Schlittermann (HS12-RIPE)
(cherry picked from commit 6429b0fc79595f120703c022ae99aa10d698f909)
2021-05-27rewrite: revert to unchecked result of parse_extract_address()Heiko Schlittermann (HS12-RIPE)
Now it breaks 471, and overlong addresses won't make it into the rewrite process, as they are handled as empty. (cherry picked from commit 506286c62b8786a926dafb5bb05d3103492b86bc)
2021-05-27Honour the outcome of parse_extract_address(), testsuite 471Heiko Schlittermann (HS12-RIPE)
(cherry picked from commit 39d83bf19fc0c4364e0a665360b14194c62e4ab4)
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-12 07:57:50 +0000