summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2018-09-09Docs: more indexing of affix-related bitsJeremy Harris
2018-09-07Fix broken doc links and http→https where possiblePhil Pennock
I got a cookie-cutter email from folks noting the modssl.org doc links were broken and asking us to use their site instead, which was both helpful and a rather heavy page with advertising on it, so not something I want our docs to link to. Fixed the modssl link to point to the correct current Apache docs, since mod_ssl has not been a separate project for … a very long time. Audited every `http:` link in the Spec, replacing with https if available, updating URLs as needed, or trimming deadwood as appropriate. This did edit one license text, but in a way which I believe is reasonable and in the license holder's best interests. * Use comments with a datestamp for any remaining http: URLs, showing when they were last audited * Suggest migrating away from Berkeley DB. * Drop mention of a patched `pam_unix` module which is no longer available. * In revamping the CDB tools links, add my own tools. * Redo the intro text for the mod_ssl stuff (first person voice of PH). * Rescorla's book's online examples appear to be gone; drop mention of them and point to Ristić's more recent book too. * Point to wikipedia list of DNSxL services as an overview, in part because I dropped the reference to the defunct rfc-ignorant.org and there was no good candidate as an exemplar for domain-based lists. * Note that mksd is a candidate for removal from Exim since mks_vir is dead. * Drop LogReport/lire reference (dead/gone and can't find it). * Redo proxy protocol spec-linking text. * Replace FAQ A1701 with text saying "don't do that" (self-signed certs) and just telling people to use a CA instead, pointing strongly to Let's Encrypt. We did nobody any favors with that old text still being present today (it was entirely appropriate when written).
2018-08-23DMARC: Fix forensic-report envelopes to permit non-null. Bug 1896Jeremy Harris
2018-08-22Use single-bit fields for global flagsJeremy Harris
2018-08-22Logging: server pipelining offer but no uptakeJeremy Harris
2018-08-21Builtin macros for log_selector valuesJeremy Harris
2018-08-21Logging: pipelining log_selectorJeremy Harris
2018-08-17UTF8/locale: document constraints on current expansions.Phil Pennock
2018-08-16Fix utf8clean not replacing incomplete final characterPhil Pennock
Before, it was just dropped, but we document that it's replaced by ?. Tests updated, manual test-case for -be prompt is: ${utf8clean:${length_1:フィル}}
2018-08-09Fix cutthrough delivery for more than one iteration of address redirection. ↵Jeremy Harris
Bug 2296
2018-08-05Docs: add explicit warning on spoolfile formatsJeremy Harris
2018-08-0418N: fix docs for option name. Bug 2246Gedalya
Incorrect at introduction in 71c158466d.
2018-08-04REQUIRETLS: amplify docs discussionJeremy Harris
2018-07-31Make -n work with macros tooPhil Pennock
Have `exim -n -bP macro FOO` just print the value of the macro `FOO`, without the `name=` prefix. This is the same handling as used for option values. If the invoker asks for multiple macros in one invocation, with `-n`, then that's their problem.
2018-07-28I18N: add a utf8_downconvert option to the smtp transport. Bug 2248Jeremy Harris
2018-07-27Support REQUIRETLSJeremy Harris
2018-07-18I18N: reject SMTPUTF8 MAIL command when facility not advertisedJeremy Harris
2018-07-18I18N: Fix protocol recorded for a multi-SMTPUTF8-message connection. Bug 2287Jeremy Harris
2018-07-18Docs: clarify rolled-up dkim status availability in data ACLJeremy Harris
2018-07-13doc: DANE: don't claim TA can be elided from chainPhil Pennock
While technically an implementation can choose to use a public TA from DNS or elsewhere to populate a missing TA from the chain, that creates interoperability issues and the OpenSSL integration code, at least, doesn't support that and after a bit of work drilling through layers of abstraction, I've not figured out what GnuTLS does and I've decided I don't care. So I'm heeding Viktor's advice and changing the docs to just say to publish the TA in the chain sent by the server.
2018-07-10nit typoPhil Pennock
2018-07-10Document problems with SHA-1 in certs with DANE-TAPhil Pennock
Very few domains are using SHA-1 in EE certs issued from a CA used in DANE-TA anchoring, but some are. Meanwhile apparently GnuTLS now defaults to disabling SHA-1 in chains. Which is eminently reasonable. I do not believe that Exim should re-enable use of SHA-1 here. Let it die. Document with warnings that folks using a private CA for certs to be publicly trusted via DANE-TA should follow decent operational issuance practices. Also update my Channel Binding docs for GSASL to warn that Channel Binding is Broken™.
2018-06-27Restore rsmapd supportJeremy Harris
Following discussions on the exim-user mailinglist it seems that the conclusion that the interface was nonfunctioning was unwarranted.
2018-06-26tidyingJeremy Harris
2018-06-26Revert "Support Rspamd. Patch from Andrew Lewis, lightly editorialised"Jeremy Harris
This reverts commit c5f280e20a8e3ecd5f016b8fb34a436588915ed2.
2018-06-25Expansions: A tls option on ${readsocket }. Bug 2282Jeremy Harris
2018-06-25ARC: Fix verification to do AS checks in reverse orderJeremy Harris
Broken from the original introduction (617d39327e)
2018-06-24TLS: rework client-side use with an explicit context rather than a globalJeremy Harris
2018-06-21DKIM: Fix signing for body lines starting with a pair of dots. Bug 2284Jeremy Harris
Broken-by: 42055a3385
2018-06-21Docs: spellingKirill Miazine
2018-06-20OpenSSL: TLSv1.3 notesJeremy Harris
2018-06-14OpenSSL: enable use of TLS 1.3 (with OpenSSL 1.1.0 and later)Jeremy Harris
2018-06-14Add client-ip info to non-pass iprev ${authres } linesJeremy Harris
2018-06-12Clarify the socket address family (UNIX) for server_socket (dovecot)Heiko Schlittermann (HS12-RIPE)
Wishlist item (#2280) is created for INET connections. See https://bugs.exim.org/show_bug.cgi?id=2280
2018-06-09DKIM: support timestamp and expiry tags in signing. Bug 2260Jeremy Harris
2018-06-07Follow CNAME chains only one step. Bug 2264Jeremy Harris
2018-06-07ARC: Fix signing for case when DKIM signing failedJeremy Harris
2018-06-06Change-logJeremy Harris
2018-05-24Use serial number 1 for self-generated selfsigned certificateJeremy Harris
Broken-by: 23bb69826c
2018-05-19Docs: add note on DKIM signing-limit securityJeremy Harris
2018-05-16Callouts: record succeeding random local-part tests. Bug 177Jeremy Harris
2018-05-16Content scanning: Fix locking on message spool files. Bug 2275Jeremy Harris
2018-05-15Don't open spool data-files which are symlinksPhil Pennock
2018-05-07tidyingJeremy Harris
2018-05-05Cutthrough: fix race resulting in duplicate-delivery. Bug 2273Jeremy Harris
2018-05-01Expansions: new ${lheader:<name>}. Bug 2272Jeremy Harris
2018-04-28Docs: minor fixesJeremy Harris
2018-04-25ARC: add $arc_oldest_pass variable, for verifyJeremy Harris
2018-04-25ARC: support $arc_domains also for verify failsJeremy Harris
2018-04-24ARC: add $arc_domains variable, for verify passJeremy Harris
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-28 03:59:28 +0000