Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-12-27 | Update Changelog for GnuTLS and TLS 1.3 Bug 2359exim-4.92-RC4 | Heiko Schlittermann (HS12-RIPE) | |
Fix is in 4896a3192ffac48885347460377edcd893eb9600 | |||
2018-12-25 | GnuTLS: repeat lowlevel read and write operations while they request retry | Andreas Metzler | |
(cherry picked from commit 06faf21f3a84a3ac4aa4f7b1512087423d8c8541) | |||
2018-12-21 | OpenSSL: clear any leftover errors from the stack after SSL_accept succeeds | Jeremy Harris | |
2018-12-20 | Grammar changes in docs | Heiko Schlittermann (HS12-RIPE) | |
2018-12-20 | spelling fixes | klemens | |
2018-12-20 | Docs: tweaks | Jeremy Harris | |
2018-12-18 | Default config: use ROUTER_SMARTHOST macro; documentexim-4.92-RC3 | Phil Pennock | |
Work around the `$host` vs CNAME issue for now by re-specifying the `tls_sni` value on the example `smarthost_smtp` transport, using the same macro which we use to turn on use of a smarthost. Uncomment both dnslookup and smarthost routers by default and let the macro choose between them. Bring the documentation of the default configuration closer to up-to-date, on this issue and others which I spotted while in there. | |||
2018-12-18 | Update Changelog for Bug 2351 | Heiko Schlittermann (HS12-RIPE) | |
2018-12-18 | Log failures to extract envelope addresses from message headers. Bug 2351 | Jeremy Harris | |
(cherry picked from commit 60c02b350a7d325e64ae0a656cfd37a9fbd162a7) | |||
2018-12-16 | doc: gsasl: be clearer that server-side only | Phil Pennock | |
2018-12-06 | Docs: SPF lookup type | Jeremy Harris | |
2018-12-05 | Send delay-MDN for any queurun past delay_warning, even if not retry time ↵ | Jeremy Harris | |
yet. Bug 2341 | |||
2018-12-01 | Harden string-list handling | Jeremy Harris | |
2018-11-28 | OpenSSL: fail the handshake when SNI processing hits a problem | Jeremy Harris | |
2018-11-28 | TLS: Increase RSA keysize of autogen selfsign cert | Jeremy Harris | |
2018-11-21 | nit (typo fix; docs) | Phil Pennock | |
2018-11-21 | Fix cyrus-sasl authenticator for $authenticated_fail_id. Bug 2238 | Jeremy Harris | |
2018-11-20 | Docs: more on $authenticated_fail_id | Jeremy Harris | |
2018-11-20 | Docs: add note on manualroute route-lists | Jeremy Harris | |
2018-11-20 | Docs: indexing of retry final-cutoff | Jeremy Harris | |
2018-11-13 | Docs: Add cross-refs for $h_<name> | Jeremy Harris | |
2018-11-11 | Docs: add notes on smtps | Jeremy Harris | |
2018-11-05 | Squashed commit of PIPE_CONNECT | Jeremy Harris | |
2018-10-30 | MacOS: TCP Fast Open | Jeremy Harris | |
2018-10-30 | Increase size of variables for check_spool_space and check_log_space | Jeremy Harris | |
2018-10-21 | Fix bad use of library, copying string over itself | Jeremy Harris | |
2018-10-21 | tidying | Jeremy Harris | |
2018-10-14 | tidying | Jeremy Harris | |
2018-10-12 | Increase buffer size used for DNS responses. Bug 2329 | Jeremy Harris | |
2018-10-06 | Docs: tweak ARC description | Jeremy Harris | |
2018-10-02 | Debug: noutf8 selector. Bug 2324 | Jeremy Harris | |
2018-09-30 | Expansions: extract methods for JSON objects and arrays. Bug 2282 | Jeremy Harris | |
2018-09-28 | Events: Fire msg:fail:internal for a non-system filter "fail" command. Bug ↵ | Matthias Kurz | |
2322 | |||
2018-09-28 | Events: Fire msg:fail:delivery event even when error is being ignored. Bug ↵ | Matthias Kurz | |
2314 | |||
2018-09-26 | Logging: do not log a missing proxy address, on delivery non-proxied. | Jeremy Harris | |
Broken-by: e6d2a9894d | |||
2018-09-20 | Builtin macros for OpenSSL options | Jeremy Harris | |
2018-09-18 | GnuTLS: simplify cert hostname checking | Jeremy Harris | |
2018-09-17 | DANE: fix TA-mode verify under GnuTLS. Bug 2311 | Jeremy Harris | |
2018-09-17 | Avoid fixed-size buffers for file paths in DB open | Jeremy Harris | |
2018-09-17 | Events: raise msg:fail:internal & msg:complete for -Mrm. Bug 2310 | Matthias Kurz | |
2018-09-16 | Fix filter noerror command. Bug 2318 | Matthias Kurz | |
2018-09-10 | Docs: document ancillary info for more event types. Bug 2313 | Matthias Kurz | |
Patch from Matthias, with additional code indentation tweaks from JGH | |||
2018-09-09 | docs: unbreak spec build | Phil Pennock | |
I've created a homebrew tap with sdop and xfpt in it, so I can install those more easily on macOS in the future, and now have bothered actually building the docs. `.url()` should have been `&url()` in two places. The `make spec.pdf` pipeline yields a document where those are not clickable links, but if i use `make spec.ps` and let macOS auto-convert to PDF upon open, those are proper clickable hyperlinks. So this switch is definitely for the better. | |||
2018-09-09 | Docs: more indexing of affix-related bits | Jeremy Harris | |
2018-09-07 | Fix broken doc links and http→https where possible | Phil Pennock | |
I got a cookie-cutter email from folks noting the modssl.org doc links were broken and asking us to use their site instead, which was both helpful and a rather heavy page with advertising on it, so not something I want our docs to link to. Fixed the modssl link to point to the correct current Apache docs, since mod_ssl has not been a separate project for … a very long time. Audited every `http:` link in the Spec, replacing with https if available, updating URLs as needed, or trimming deadwood as appropriate. This did edit one license text, but in a way which I believe is reasonable and in the license holder's best interests. * Use comments with a datestamp for any remaining http: URLs, showing when they were last audited * Suggest migrating away from Berkeley DB. * Drop mention of a patched `pam_unix` module which is no longer available. * In revamping the CDB tools links, add my own tools. * Redo the intro text for the mod_ssl stuff (first person voice of PH). * Rescorla's book's online examples appear to be gone; drop mention of them and point to Ristić's more recent book too. * Point to wikipedia list of DNSxL services as an overview, in part because I dropped the reference to the defunct rfc-ignorant.org and there was no good candidate as an exemplar for domain-based lists. * Note that mksd is a candidate for removal from Exim since mks_vir is dead. * Drop LogReport/lire reference (dead/gone and can't find it). * Redo proxy protocol spec-linking text. * Replace FAQ A1701 with text saying "don't do that" (self-signed certs) and just telling people to use a CA instead, pointing strongly to Let's Encrypt. We did nobody any favors with that old text still being present today (it was entirely appropriate when written). | |||
2018-08-23 | DMARC: Fix forensic-report envelopes to permit non-null. Bug 1896 | Jeremy Harris | |
2018-08-22 | Use single-bit fields for global flags | Jeremy Harris | |
2018-08-22 | Logging: server pipelining offer but no uptake | Jeremy Harris | |
2018-08-21 | Builtin macros for log_selector values | Jeremy Harris | |
2018-08-21 | Logging: pipelining log_selector | Jeremy Harris | |