summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-11-25Testsuite: "echo -n" portability - use printf(1) if possibleJeremy Harris
2014-11-25Error the build if DANE included but DNSSEC not availableJeremy Harris
2014-11-25Docs typo in index entry. Fixes: #1551Nigel Metheringham
2014-11-23Document OpenSSL behaviour on system default CA bundleJeremy Harris
2014-11-22Docs: fix missing quotesJeremy Harris
2014-11-21Docs: crossref $sending_ip_address. Bug 1319Jeremy Harris
2014-11-21Testsuite: case 0601 logging orderingJeremy Harris
2014-11-21Update RFC conformance notesJeremy Harris
2014-11-21Testsuite: debugging Solaris run ordering issue. Log +received_recipientsJeremy Harris
2014-11-20When following a CNAME chain, if any lookup is insecure the whole must be tooJeremy Harris
2014-11-20Const-ificationJeremy Harris
2014-11-20Const-ificationJeremy Harris
2014-11-20Fix copying of host_used in smtp transportJeremy Harris
Following c562f "More regular logging use of H=<name> [<ip>]" there were error cases where a host-item that was being expanded per-call was used. Move the copy earlier so these are covered.
2014-11-18Testsuite: msglog filesJeremy Harris
2014-11-18Compiler quieteningJeremy Harris
2014-11-16Fix debug output of name of transport option list being matchedJeremy Harris
2014-11-16Test case for retry_include_ip_addressJeremy Harris
2014-11-16docs typoJeremy Harris
2014-11-13Add items to NewStuffexim-4_85_RC1Todd Lyons
2014-11-13ChangeLog entries for minor feates and fixes since 4.84Jeremy Harris
2014-11-12Move DANE desgin doc, drop extra dane draftsTodd Lyons
2014-11-12Testsuite: munge for unrelated test affected by EXPERIMENTAL_CERTNAMESJeremy Harris
2014-11-12Testsuite: 0393 intermittently spits an extra stderr line. UnimportantJeremy Harris
for the testcase, so ignore it.
2014-11-11Handle UTC vs specified-timezone for certificate extractors. Bug 1541Jeremy Harris
2014-11-08Testsuite: additional dns zone for certificate name testingJeremy Harris
2014-11-08Fix smtp transport certificate-verification option matching to use correct hostJeremy Harris
Fix certificate name verification done with tls_try_verify_hosts Affected tls_verify_hosts, tls_try_verify_hosts, tls_verify_cert_hostnames.
2014-11-06EXPERIMENTAL_CERTNAMES: Hostlist for cert name checks should match hostJeremy Harris
connected-to, not be list of acceptable names. The name checked is the host name.
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL, ↵Jeremy Harris
EXPERIMENTAL_CERTNAMES)
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL)Jeremy Harris
2014-11-05Add doc examples for disabling SSLv3Jeremy Harris
2014-11-04Fix dnssec indication variable when used from verify-callout smtp:commect eventJeremy Harris
2014-11-03Tweak docs on difference between "local" and "remote" source messagesJeremy Harris
2014-11-03Testsuite: tidyingJeremy Harris
2014-11-01Testsuite: tidyingJeremy Harris
2014-10-30Fix cert-try-verify when denied by event actionJeremy Harris
2014-10-30Test suite: disable OCSP for old openssl part 3Jeremy Harris
2014-10-30Fix dnssec indication variable when used from smtp:commect eventJeremy Harris
2014-10-30For connects and certificate-verifies denied by event actions, logJeremy Harris
the string resulting from the event expansion
2014-10-29Test suite: disable OCSP for old openssl part 2Todd Lyons
Make sure to only disable this if building for openssl, allow gnutls to build with OCSP for all versions that support it.
2014-10-29Test suite: disable OCSP for old OpenSSL versionsTodd Lyons
OpenSSL 0.9.8 in CentOS 5.x has early OCSP support, but not stapling so just completely disable OCSP using the same logic that exists in tls-openssl.c.
2014-10-29Testsuite: compiler quieteningJeremy Harris
2014-10-29Testsuite: tidyingJeremy Harris
2014-10-28Testsuite: compiler quieteningJeremy Harris
2014-10-26Testsuite: output changes for ipv6Jeremy Harris
2014-10-26Do not claim OCSP support when compiled with too-old GnuTLS versionJeremy Harris
2014-10-26Fix cert-try-verify when denied by event actionJeremy Harris
2014-10-26Testcase 0601: move udpsend action from connect to rcpt ACLJeremy Harris
Some test runs were seeing the receiving perl output before the exim startup banner; try to get the udpsend to happpen after the banner gets a chance to be emitted.
2014-10-26Testsuite: increase default "client" utility connect timeout from 1 to 5 secondsJeremy Harris
2014-10-26Testsuite: use different exit codes for various fail modes of "client" utilityJeremy Harris
2014-10-26Fix feature-ifdef for OpenSSL builtin certname checkingJeremy Harris