summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-03-21Merge branch 'dbmjz'Phil Pennock
2012-03-21heimdal_gssapi: accept SASL with empty authzidPhil Pennock
Saw this happening with Apple Mail; accept it, dup the GSS Display Name
2012-03-02Add dbmjz lookup typePhil Pennock
2012-02-19Log auth data in rejectlog.Phil Pennock
http://bugs.exim.org/attachment.cgi?id=547&action=edit fixes bug: 1214 Patch by Jeremy Harris
2012-02-18expand cyrus_sasl server_realm optionPhil Pennock
2012-02-18Merge branch 'sasl_fixes'Phil Pennock
2012-02-18Use gsasl_property_fast() in property callback.Phil Pennock
Avoids the loops which we only cancel out anyway.
2012-02-18Document pkg-config for TLSPhil Pennock
2012-02-18Support pkg-config for SSL libraries.Phil Pennock
Also: update EDITME to refer to pkg-config & AUTH_HEIMDAL_GSSAPI.
2012-02-18Document pkg-configPhil Pennock
2012-02-18Swap gsasl GSSAPI $auth1/$auth2Phil Pennock
2012-02-18Drop server_realm from heimdal_gssapiPhil Pennock
2012-02-18Document heimdal_gssapi as it works now.Phil Pennock
2012-02-18Minor cleanups.Phil Pennock
multi-blank-line protection never set the bool needed OID-method for keytab setting cleanup (drop <roken.h> and fix comments)
2012-02-17Use gsskrb5_register_acceptor_identityPhil Pennock
Drop the OID and pseudo-standard GSSAPI extension mechanism. Found Heimdal-specific API call I needed, works great. gsskrb5_register_acceptor_identity(filename) Separately: add various debug statements.
2012-02-15First pass heimdal_gssapi authenticator.Phil Pennock
Not yet working, failing to set keytab. Also: support (AUTH|LOOKUP)_*_PC=foo to use `pkg-config foo` for cflags/libs.
2012-02-13Document gsasl integrationPhil Pennock
2012-02-05More bug-fixes, GSASL DIGEST-MD5 now works.Phil Pennock
Defined helper streqic() since I seem tired enough to be forgetting ==0 checks. Deal with left-over-data-to-send correctly. Now tested with PLAIN, CRAM-MD5, DIGEST-MD5. For DIGEST-MD5, check for server_realm, since GSASL doesn't error out without it.
2012-02-05remove stray globals blockPhil Pennock
2012-02-05Implemented gsasl driver for authentication.Phil Pennock
Missing: documentation; tests. Tested: PLAIN auth. Status: probably buggy
2012-02-04Documentation for $tls_bits and SASL changesPhil Pennock
2012-02-04Various SASL fixes.Phil Pennock
Export $tls_bits new expansion variable (not yet documented). Fix tls-gnu.c so that ciphername string construction uses bit-count, not byte-count. Avoid hard-coding primary_hostname in first call to init Cyrus SASL. Cast fix for function pointer (Cyrus-SASL uses void params in struct entry funcptr, so need to cast). Many more debug statements in cyrus_sasl.c Pass external SSF from TLS cipher into Cyrus SASL initialisation. Detect when we can't get an identity from SASL properties (error out correctly). Detect when SASL negotiated a protection layer and error out, since we do not support those.
2012-01-03bool{} is false for empty stringsPhil Pennock
fixes bug 1193 reported by Jasen Betts.
2011-11-30Documentation had primary_host_name for primary_hostname. Fixes: #1169Nigel Metheringham
2011-11-30eximstats DATA reject detection regexps improved. Fixes: #1093Nigel Metheringham
2011-11-30Documentation fix. Fixes: #949Nigel Metheringham
2011-11-22Handle short writes on logfiles.Phil Pennock
fixes bug 1053
2011-11-20Merge branch 'log_retry'Phil Pennock
2011-11-18Rough readme mainly for benefit of githubNigel Metheringham
Pod translator is lousing up - may move to a different format for the future. [issues are with L<> links]
2011-11-13log_write EINTR handling on write()Phil Pennock
2011-11-10Parallel build fixes for lookupsPhil Pennock
Make lookups depend upon PHDRS not HDRS. Make parent dir depend upon child build target for lookups
2011-10-20ASCII NUL in desc of $body_zerocount (keyword grepability)Phil Pennock
2011-10-14EXPAND_LISTMATCH_RHS for match_ip tooPhil Pennock
2011-10-11PCRE_PRERELEASE is a bare sequence, not a string.Phil Pennock
2011-10-10Unbreak release.sh for final releasesexim-4_77Phil Pennock
2011-10-10Update release date, prep for 4.77 final cutPhil Pennock
2011-10-09Testsuite: also handle -XX in versionPhil Pennock
2011-10-09More testsuite fixesPhil Pennock
2011-10-09Make runtest more resilient to setup problemsPhil Pennock
2011-10-09fix unprotected variable in SQL examplePhil Pennock
2011-10-08Make README.UPDATING more explicit, with more examples, about the impact of ↵Phil Pennock
the match_<type> changes
2011-10-07exiqgrep: handle queue line size output too small for KPhil Pennock
2011-10-06rework userforward local_part_suffix documentationPhil Pennock
Loosely based on suggestion from Julian Gilbey. fixes bug 1139.
2011-10-06shut up bogus complaint of unused variable in new ratelimit ACL workexim-4_77_RC4Phil Pennock
2011-10-05Apply patch from Dmitry Isaikin fixing log.c format string.Phil Pennock
fixes bug 1152.
2011-10-05fix sub2_honour_dollar typeexim-4_77_RC3Phil Pennock
Was code correct before, but storing a ptr of 0 or 1, from bool initialiser. I meant to use a BOOL and it is more type-safe to do so, so fixed.
2011-10-05quote var for case stmt, so that old shell will see it as empty, rather than ↵Phil Pennock
syntax error
2011-10-05test for .git dir with -d not -e; more portablePhil Pennock
2011-10-05Solaris/Irix portability hacks for reversionPhil Pennock
2011-10-03source referenced version.sh file alwaysexim-4_77_RC2Phil Pennock
Tested for version.sh in cwd, but used . to source, assuming that would pull in file from cwd. True on BSD (checked after $PATH) but not part of POSIX and not true for bash when in POSIX mode.