summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-11-08Fix smtp transport certificate-verification option matching to use correct hostJeremy Harris
Fix certificate name verification done with tls_try_verify_hosts Affected tls_verify_hosts, tls_try_verify_hosts, tls_verify_cert_hostnames.
2014-11-06EXPERIMENTAL_CERTNAMES: Hostlist for cert name checks should match hostJeremy Harris
connected-to, not be list of acceptable names. The name checked is the host name.
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL, ↵Jeremy Harris
EXPERIMENTAL_CERTNAMES)
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL)Jeremy Harris
2014-11-05Add doc examples for disabling SSLv3Jeremy Harris
2014-11-04Fix dnssec indication variable when used from verify-callout smtp:commect eventJeremy Harris
2014-11-03Tweak docs on difference between "local" and "remote" source messagesJeremy Harris
2014-11-03Testsuite: tidyingJeremy Harris
2014-11-01Testsuite: tidyingJeremy Harris
2014-10-30Fix cert-try-verify when denied by event actionJeremy Harris
2014-10-30Test suite: disable OCSP for old openssl part 3Jeremy Harris
2014-10-30Fix dnssec indication variable when used from smtp:commect eventJeremy Harris
2014-10-30For connects and certificate-verifies denied by event actions, logJeremy Harris
the string resulting from the event expansion
2014-10-29Test suite: disable OCSP for old openssl part 2Todd Lyons
Make sure to only disable this if building for openssl, allow gnutls to build with OCSP for all versions that support it.
2014-10-29Test suite: disable OCSP for old OpenSSL versionsTodd Lyons
OpenSSL 0.9.8 in CentOS 5.x has early OCSP support, but not stapling so just completely disable OCSP using the same logic that exists in tls-openssl.c.
2014-10-29Testsuite: compiler quieteningJeremy Harris
2014-10-29Testsuite: tidyingJeremy Harris
2014-10-28Testsuite: compiler quieteningJeremy Harris
2014-10-26Testsuite: output changes for ipv6Jeremy Harris
2014-10-26Do not claim OCSP support when compiled with too-old GnuTLS versionJeremy Harris
2014-10-26Fix cert-try-verify when denied by event actionJeremy Harris
2014-10-26Testcase 0601: move udpsend action from connect to rcpt ACLJeremy Harris
Some test runs were seeing the receiving perl output before the exim startup banner; try to get the udpsend to happpen after the banner gets a chance to be emitted.
2014-10-26Testsuite: increase default "client" utility connect timeout from 1 to 5 secondsJeremy Harris
2014-10-26Testsuite: use different exit codes for various fail modes of "client" utilityJeremy Harris
2014-10-26Fix feature-ifdef for OpenSSL builtin certname checkingJeremy Harris
2014-10-26Testsuite: extend timeout on troublesom testJeremy Harris
Testcase 0035 persistently fails with "status 99" on some buildfarm animals. Try extending the connect timeout used by the "client" utility to see if this helps.
2014-10-26Expand commentary on certificate filesJeremy Harris
2014-10-25Add event for inbound cert visibilityJeremy Harris
2014-10-25Make transport name available in verify-callouts. Add verify_mode variableJeremy Harris
2014-10-25Rename facility to Event Actions, ifdeffed on EXPERIMENTAL_EVENTJeremy Harris
2014-10-24Testsuite: more portable implementation of "showenv"Jeremy Harris
At least one Solaris installation seems not to have "whoami"
2014-10-23Test suite continue past unexpected client errorsTodd Lyons
2014-10-22Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2014-10-22Fix labels in testsuite conf filesTodd Lyons
2014-10-22Make $host available in tpda delivery event, for cutthrough. Bug 1529Jeremy Harris
2014-10-22More regular logging use of H=<name> [<ip>]Jeremy Harris
Note this may affect utilities which parse logs.
2014-10-22Testsuite outputs: ipv6Jeremy Harris
2014-10-20Compiler quieteningJeremy Harris
2014-10-20Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2014-10-20Test suite: completely omit 127/8 IPsTodd Lyons
2014-10-16Handle certificate dir under GnuTLS, if recent enoughJeremy Harris
Add testcases for certificate directories The GnuTLS implementation has been tested on Fedora 21 (alpha), using GnuTLS 3.3.9. The testsuite case is here but with the script commented-out. When enabled, the log/mail/stdout/stderr files will be created fresh.
2014-10-12Testsuite output gnutls changes resulting from munging for opensslJeremy Harris
version differences
2014-10-12Make dnssec status available in tpda delivery event, for cutthroughJeremy Harris
2014-10-12Quieten noisy compilerJeremy Harris
As usual, gcc whining that perfectly valid C coding is "ambiguous". Wrongly.
2014-10-05Remove limit on remove_headers item size. Bug 1533Jeremy Harris
2014-09-29Fix Solaris buildJeremy Harris
2014-09-29Doc notes on expansion orderingJeremy Harris
2014-09-28More testsuite variance between OpenSSL library versionsJeremy Harris
2014-09-28Fix transport-results pipe for multiple recipients combined with certs.Wolfgang Breyha
The previous parsing failed when a result item split over a buffer boundary; fix by prefixing sizes to items, and checking enough has been read as the initial parsing stage.
2014-09-25Clarify error message for host-connect fail. Bug 1505Jeremy Harris