summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2013-09-30Bug 1031: Experimental TPDAJeremy Harris
Remove whitespace
2013-09-28Correct spelling of dmarc_disable_verifyJeremy Harris
2013-09-27Document hexquote & udpsend in NewStuff/ChangeLogPhil Pennock
Tony documented his new features in 7a5698fa; this change simply adds them to the list of things that have changed.
2013-09-26Clarify CL: the CVE security fix already in 4.80.1Phil Pennock
On re-reading the text for 4.82, it read as though there were a new security fix which might require an upgrade. Clarified that this fix has already been released (in 4.80.1).
2013-09-24Additions to the NewStuff summary fileTodd Lyons
2013-09-23Add documentation for new $authenticated_fail_idTodd Lyons
2013-09-22Bug 1287 - Fix tls_require_certTodd Lyons
2013-09-22Prevent TLS rebinding in LDAP connectionsTodd Lyons
Bugzilla 1375
2013-09-22Add expansion $authenticated_fail_idTodd Lyons
2013-09-15ChangeLogJeremy Harris
2013-09-04ChangeLog is in chronological order within each release.Phil Pennock
numbers are sequential, namespaced by users.
2013-09-04Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2013-09-04Make sender/recipient search case-insensitiveTodd Lyons
2013-09-04tls_dhparam size constraint suggestions.Phil Pennock
Between NSS and Debian patching of older Exim releases, there's a narrow range of values likely to interoperate well. Document this.
2013-09-01GnuTLS website movesPhil Pennock
2013-07-31Fix segfault in stdio with non-SMTP MIME ACL.Phil Pennock
When injecting a message locally in non-SMTP mode, and with MIME ACLs configured, if the ACL rejected the message, Exim would try to `fprintf(NULL, "%s", the_message)`. This fixes that. Most ACLs are plumbed in SMTP-only and looking through the others in receive.c, they all appear to be safely guarded, so it was just this one that slipped through. Crash report and assistance tracking down the root cause from Warren Baker.
2013-06-30Add notes and helper-script for OCSPJeremy Harris
2013-06-16Support safari_ecdhe_ecdsa_bug for openssl_optionsPhil Pennock
2013-06-10Guard LDAP TLS usage against Solaris LDAP variant.Phil Pennock
PP/22 Report from Prashanth Katuri. This variant ensures that if TLS won't be activated because of compile-time guards, but was requested, then we at least debug-log _why_ we're not doing anything.
2013-06-04Fix eximon continuous updating with timestamped log-files.Phil Pennock
Report and fix from Heiko Schlichting. Fixes 1363.
2013-05-25Add doc comment on use of forany.Jeremy Harris
2013-05-23Documentation for udpsend and ${hexquote:Tony Finch
2013-05-22Merge branch 'callout_auth'Jeremy Harris
2013-05-21Typo in doc source.Jeremy Harris
2013-05-20Support AUTH for verify-callout and cutthrough-delivery.Jeremy Harris
Refactored smtp transport to pull out AUTH-related routines so they could be also called from the verify code. Bugs 321, 823.
2013-05-08Fix dns_retry definition.Todd Lyons
Was placed in non-alphabetical order.
2013-05-05Security considerations: running local commandsPhil Pennock
Call out the dangers of use_shell in the security considerations chapter. Call out a number of related dangers too.
2013-04-21Document PRDR, OCSP & DMARC options in OptionLists file.Jeremy Harris
2013-04-19Add entry to Changelog.Todd Lyons
2013-04-09DMARC documentation and licenseTodd Lyons
2013-04-07Merge branch 'ocsp_staple_rollup'Jeremy Harris
* ocsp_staple_rollup: tidying OCSP-stapling enhancement and testing.
2013-04-03Fix -p doc mention of Perl -pd conflict.Phil Pennock
Reported by Heiko Schlichting. fixes 1345
2013-04-01Clean & integrate force_command.Phil Pennock
Work by J. Nick Koston, for cPanel, Inc.
2013-04-01Add the force_command option to the pipe transportJ. Nick Koston
Normally when a router redirects an address directly to a pipe command the command option on the transport is ignored. If force_command is set, the command option will expanded and used. This is especially useful for forcing a wrapper or additional argument to be added to the command.
2013-03-25OCSP-stapling enhancement and testing.Jeremy Harris
Server: Honor environment variable as well as running_in_test_harness in permitting bogus staplings Update server tests Add "-ocsp" option to client-ssl. Server side: add verification of stapled status. First cut server-mode ocsp testing. Fix some uninitialized ocsp-related data. Client (new): Verify stapling using only the chain that verified the server cert, not any acceptable chain. Add check for multiple responses in a stapling, which is not handled Refuse verification on expired and revoking staplings. Handle OCSP client refusal on lack of stapling from server. More fixing in client OCSP: use the server cert signing chain to verify the OCSP info. Add transport hosts_require_ocsp option. Log stapling responses. Start on tests for client-side. Testing support: Add CRL generation code and documentation update Initial CA & certificate set for testing. BUGFIX: Once a single OCSP response has been extracted the validation routine return code is no longer about the structure, but the actual returned OCSP status.
2013-03-23Rename dns_use_dnssec to dns_dnssec_ok.Phil Pennock
This per Tony's suggestion; this makes it clearer that we are merely setting resolver flags, not performing validation ourselves. Well, clearer to those who understand DNSSEC. For everyone else, they'll still be dependent upon a forthcoming new chapter to the Specification.
2013-03-13OpenSSL fix empty tls_verify_certificates.Phil Pennock
New behaviour matches GnuTLS handling, and is documented. Previously, a tls_verify_certificates expansion forced failure was the only portable way to avoid setting this option. Now, an empty string is equivalent.
2013-03-11configure.default handle IPv6 localhost better.Phil Pennock
Base patch by Alain Williams. Tweaked, to avoid putting an IPv6-dependency into the default uncommented form, and some rewording. Bugzilla 880. GitHub PR #1.
2013-03-11Document the last change in ChangeLogPhil Pennock
2013-02-19Bug 1339: DCC update (Wolfgang Breyha)Jeremy Harris
2013-02-15Add a few temp doc items to ignoreTodd Lyons
2013-01-26PRDR support, if compiled with EXPERIMENTAL_PRDRJeremy Harris
2013-01-14Update eximstats to watch out for senders sending 'HELO [IpAddr]'Steve Campbell
2013-01-14Fix GNU Hurd interface IPv6 address detection.Phil Pennock
Define SIOCGIFCONF_GIVES_ADDR in OS/os.h-GNU Fixes 1331.
2013-01-07Typo & nit fixes.Phil Pennock
JH has made more changes than he realised. New second JH/11 to JH/13.
2013-01-06Restrict lifetime of $router_name and $transport_name. Bug 308.Jeremy Harris
The router name is explicitly nulled after the router exits; the transport name is set only in the subprocess it runs in.
2012-12-25Add $router_name and $transport_name variables. Bug 308.Jeremy Harris
2012-12-23Typo fixes (experimental-spec)Phil Pennock
2012-12-20GnuTLS-FAQ: typo fixes & glitch re standard primesPhil Pennock
Mostly typos. Was one instance of "which a future release of Exim will probably support" which should already have been "which Exim now supports". Doh. Fixed too.
2012-12-11Document scripts/lookups-Makefile for new lookups.Phil Pennock
Missing step for adding a new lookup noticed by Paul Gamble.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-27 10:04:32 +0000