summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-01-01refactor show-supported codingJeremy Harris
2018-01-01tidyingJeremy Harris
2017-12-31Enable header_syntax verify in the example configJeremy Harris
2017-12-30MIME ACL: fix SMTP response for non-accept result of the ACL. Bug 2214.Jeremy Harris
As far as I can see this was broken back in 2013, f4c1088 for 4.82
2017-12-29Fix issue with continued-connections when the DNS shifts unreliablyJeremy Harris
2017-12-29Fix crash associated with dnsdb lookup done from DKIM ACL. Bug 2215Jeremy Harris
Broken-by: cc55f4208e
2017-12-28Use common routine for building tagstring for dns-fail cacheJeremy Harris
2017-12-28Debug: enhance output from smtp transport entryJeremy Harris
2017-12-28DKIM: tighter checking while parsing signature headers. Bug 2217Jeremy Harris
2017-12-28Check ARGV before subscripting itGeraint Edwards
2017-12-27Testtsuite: output changes resultingJeremy Harris
2017-12-27Testsuite: better portability of postgresq test vs. postgresql versionsJeremy Harris
2017-12-24Lookups: fix pgsql multiple-row, single-column returnJeremy Harris
Report & fix from James <list@xdrv.co.uk>; additional tidying and testcase by JGH Broken-by: acec9514b1
2017-12-24Testsuite: shift pgsql tests to the standard-run setJeremy Harris
2017-12-24Testsuite: convert posgreql testing to standaloneJeremy Harris
2017-12-23Delivery: remove restriction on dirname length on having to create ↵Jeremy Harris
directories. Bug 2213
2017-12-22DANE/GnuTLS: split verification of mixed sets of TLSA records by usageJeremy Harris
This is because we cannot do the required CA-anchor and names checks for TA-mode and not for EE-mode, without knowing which usage TLSA was used.
2017-12-22ConstificationJeremy Harris
2017-12-22Fix const issue in nisplus lookupJeremy Harris
2017-12-22Fix build of nisplus lookupAndreas Piesk
2017-12-21exim: regularize exim -bI:help outputJosh Soref
2017-12-21exiwhat: use RM_COMMANDtv
2017-12-20DANE/GnuTLS: filter TLSA records for usabilityJeremy Harris
2017-12-20DANE/GnuTLS: ignore traditional CA anchor validation in DANE-EE modeJeremy Harris
Not quite right for a mixed TA+EE set of TLSA records, but better than always-enforcing
2017-12-20ACL: Disallow '/' characters in queue names specified for "queue="Jeremy Harris
2017-12-19Merge branch '4.next'Jeremy Harris
2017-12-19Docs: clean for next releaseJeremy Harris
2017-12-19Fix nossl buildJeremy Harris
2017-12-19DANE: support under GnuTLS. Bug 1523Jeremy Harris
GnuTLS version 3.0.0 onwards; still Experimental
2017-12-18Testsuite: move CRL testcases away from using SHA1-signed certsJeremy Harris
2017-12-16Testsuite: output changes arisingJeremy Harris
2017-12-16Testsuite: regenerate certs treeJeremy Harris
2017-12-16Testsuite: restore generation of OCSP status for EC certsJeremy Harris
Broken-by: 854586e149
2017-12-16Testsuite: do not bother with cert hostnames when testing OCSPJeremy Harris
2017-12-16Testsuite: restore lost dns config for DKIM extra-txt-records testcaseJeremy Harris
Broken-by: 854586e149
2017-12-16Testsuite output changes arisingJeremy Harris
Broken-by: 854586e149
2017-12-16DANE: fix type-2xx TLSA under older OpenSSL versions Bug 2198Viktor Dukhovni
OpenSSL 1.0.1t is known bad. 1.0.2 and 1.1.0 are apparently ok.
2017-12-16Testsuite: testcase for Bug 2198Jeremy Harris
2017-12-12CHUNKING: flush input stream after message-fatal error detection. Bug 2201exim-4_90_RC4exim-4_90Jeremy Harris
2017-12-09Testsuite: regen TLSA records, to match cert treeJeremy Harris
2017-12-09Testsuite: regen TLSA records, to match cert treeJeremy Harris
2017-12-08openssl guidance: install shared libraries tooPhil Pennock
2017-12-08tidyingJeremy Harris
2017-12-08Add compile-time guard against BDB library version 6Jeremy Harris
2017-12-04Fix non-OCSP OpenSSL buildJeremy Harris
Issue found by: Frank Elsner
2017-12-03Docs: amend warning on on lack of multiple-OCSP-proof supportJeremy Harris
2017-12-03GnuTLS: multiple server certs, OCSP stapling. Bug 2092Jeremy Harris
2017-12-03Testsuite: regen certs trees, now with OCSP response for one EC certJeremy Harris
2017-12-03Docs: clarify smtp transport tls_verify_certificates optionJeremy Harris
2017-12-03DKIM: Ignore non-DKIM TXT records in DNS response. Bug 2207Heiko Schlittermann (HS12-RIPE)