summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-05-21Docs: fix syntaxJeremy Harris
Broken-by: 12e9bb25fc
2019-05-21Expansions: ${sha2_N}Jeremy Harris
2019-05-19Change the default for hosts_noproxy_tls to unset, enabling continued-TLS ↵Jeremy Harris
deliveries as default
2019-05-19GnuTLS: fix the advertising of acceptable certs by the server. Bug 2389Jeremy Harris
2019-05-11Utilities: add -G<queuename> option to exiqgrep. Bug 2397Jeremy Harris
2019-05-10Fix listing a named queue by a non-admin user. Bug 2398Jeremy Harris
2019-05-09Avoid potential crash in close of a verify calloutJeremy Harris
2019-05-09Docs: add index entry for string-concatenationJeremy Harris
2019-05-08OpenSSL: fix build under older library versionJeremy Harris
Broken-by: 4f1d23a1aa
2019-05-07GnuTLS: fix $tls_out_ocsp under hosts_request_ocspJeremy Harris
2019-05-07OpenSSL: fix tls_out_ocsp under resumptionJeremy Harris
2019-05-07OpenSSL: fix tls_try_verify_hosts under resumptionJeremy Harris
2019-05-07TLS: increase resumption ticket lifetime to 2 hoursJeremy Harris
2019-05-07OpenSSL: discard expired resumption session in clientJeremy Harris
2019-05-07Add main option exim_versionHeiko Schlittermann (HS12-RIPE)
There might be reasons to cheat about the Exim version you're running. (Think of stupid security scanners.)
2019-05-05OpenSSL: better handling of $tls_{in,out}_certificate_verified under resumptionJeremy Harris
2019-05-05Testsuite: check variables under resumptionJeremy Harris
2019-05-05TLS: resumption notesJeremy Harris
2019-05-05OpenSSL: for older library (1.0.2) assume that a ticket callback in client onlyJeremy Harris
happens for a resumable session
2019-05-04OpenSSL: increase STEK strength to 256bJeremy Harris
2019-05-02TLS: library version build-time checks for resumption supportJeremy Harris
2019-05-02Fix build on older OpenSSLJeremy Harris
Broken-by: b10c87b38c
2019-05-02Fix build on older GnuTLSJeremy Harris
Broken-buy: b10c87b38c
2019-05-02Debug: restore GnuTLS debug level.Jeremy Harris
Broken-by: b10c87b38c
2019-05-02TLS: Session resumption, under the EXPERIMENTAL_TLS_RESUME build option.Jeremy Harris
2019-04-27Testsuite: GnuTLS version variancesJeremy Harris
2019-04-27tidyingJeremy Harris
2019-04-27ARC: harden against malformed headersJeremy Harris
2019-04-26Build: move md5.c from auths library to main; exim_fixdb no longer depends ↵Jeremy Harris
on auths
2019-04-26Testsuite: GnuTLS version variancesJeremy Harris
2019-04-25Avoid defining inlinable fn for utilities buildJeremy Harris
2019-04-25Fix build with older GnuTLS, reduxJeremy Harris
2019-04-25Fix build with older GnuTLSJeremy Harris
2019-04-25Testsuite: avoid recent-perl feature useJeremy Harris
2019-04-25Testsuite: GnuTLS version variancesJeremy Harris
2019-04-25GnuTLS 3.6.7 cipher stringsJeremy Harris
2019-04-25Avoid defining inlinable fn for MACRO_PREDEF buildJeremy Harris
Some compilers include them even when unused, and the link stage fails
2019-04-25Testsuite: output changes resultingJeremy Harris
Broken-by: 67ea939cf0
2019-04-25Use unsigned when creating bitmasks in macrosJeremy Harris
2019-04-24GnuTLS: debug output for how to get TLS 1.3 keyingJeremy Harris
2019-04-24Debug: output priv-gid dropJeremy Harris
2019-04-23Compiler quieteningJeremy Harris
2019-04-22Fix missing return value from exim_chown_failureHeiko Schlittermann (HS12-RIPE)
2019-04-22Compiler quieteningJeremy Harris
2019-04-22Testsuite: output changes resultingJeremy Harris
Broken-by: cb80814d14
2019-04-19exigrep: do case sensitive option processing again. Closes 2392Heiko Schlittermann (HS12-RIPE)
-M (--related) was hidden by -m (--man), because of case insensitive option matching. (4.90 … 4.92 did case insensitive option processing) Thanks to Andreas Metzler for reporting this issue.
2019-04-19Intercept chown()/fchown() failure and emit a pointer to the bugreport. ↵Heiko Schlittermann (HS12-RIPE)
Closes 2391 In a specific NFS setup we experienced a failing chown(). As it is not clear, whether this was due to a misconfiguration or if this may happen in other environments too, we behave as usual (abort the operation), but issue a MAIN_LOG and PANIC_LOG entry pointing to this Bugreport. You're encouraged to contact the developers, if you hit this issue.
2019-04-18Merge branch 'bug/2390-tmpfile-race'Heiko Schlittermann (HS12-RIPE)
2019-04-18testsuite: Update to match the new "hdr.$message_exim_id" tmp file name Bug 2390Heiko Schlittermann (HS12-RIPE)
2019-04-18Use message_id for tempfile creation Closes 2390Heiko Schlittermann (HS12-RIPE)
Make tempfile names unique across Exim instances running in a cluster on a shared $spool_directory. (They need to set localhost_number to have cluster-unique message_exim_ids.)