summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2017-02-12Forward-port ChangeLog entries written for release branchexim-4.90devstartPhil Pennock
2017-02-124.89 JH/17 -> 4.90 JH/01Phil Pennock
2017-02-11Fix missing Changelog entries for recent workPhil Pennock
2017-02-10TLS: rework error logging to pass more string back to caller for loggingJeremy Harris
This permits a library-sourced error to be associated with an address being delivered, collapsing pairs of log lines
2017-02-08Memory management: drop variables identified as going out-of-scopeJeremy Harris
Fixes crash in transport re-using bad $sender_ip_address from callout
2017-02-07DocÖ Fix typo about spf lookup (experimental)Heiko Schlittermann (HS12-RIPE)
2017-02-06doc-fix: reference current libsrs_alt availabilityPhil Pennock
Matches site from Wiki, from Google SERP, etc.
2017-02-02FreeBSD: Perl no longer in /usr/bin from PortsPhil Pennock
FreeBSD Ports by policy no longer allows symlinks in /usr/bin for things like Perl, so we have to look in /usr/local/bin for it instead.
2017-02-02Spec docs for IDNA2008 supportPhil Pennock
2017-01-31Proxy clarification & nit fixes.Phil Pennock
Release: should be cherry-picked into 4.89RC series
2017-01-31Handle Proxy Protocol v2 safely as well.Phil Pennock
We had test suite failures (test suite success!) because Proxy Protocol v2 (PPv2) wasn't being detected; by only reading 12 octets, the >= 16 check was failing. But in fact I had previously only fixed reading "only enough" for PPv1. Handling both PPv1 and PPv2 is complicated because the minimum valid length for PPv1 is 15 octets but for PPv2 the size to read is in the 15th and 16th octets. So refactored a little and we now use a total of 3 reads for the PPv2 case (assuming no fragmentation, etc; we'll actually keep reading now instead of aborting) to get the entire PPv2 header of exactly the right size, so that TLS handshake immediately following the PP header is not also swallowed. Fixes: 2018 Tested: manually, TLS and non-TLS, PPv1 and PPv2, all ways. Release: should be cherry-picked into 4.89RC series
2017-01-30Copyright year bumps for substantive changes 2017exim-4_89_RC1Phil Pennock
2017-01-30Document that fixed 2018Phil Pennock
Fixes: 2018
2017-01-30Restrict address-parsing to a maximum of five layers of nested angle-brackets,Jeremy Harris
under main-option strip_excess_angle_brackets
2017-01-29Update change logJeremy Harris
2017-01-29CHUNKING: Reject messages with malformed line ending. Bug 2000Jeremy Harris
Actually test only the first header line, but still do full line-ending canonicalisation on the remainder of the message in case a Evil Person slips past that.
2017-01-29Docs: add note on verify = senders= . Bug 2028Jeremy Harris
2017-01-28Docs: add note on system_filter forced expansion failJeremy Harris
2017-01-22Document OpenBSD resolver ignoring EDNS0Phil Pennock
2017-01-22DKIM: permit verify of sig blocks that sign other sig blocks. Bug 2014Jeremy Harris
2017-01-21Fix DKIM verify when used with CHUNKING. Bug 2016Jeremy Harris
2017-01-21Testcases for pipelined calloutJeremy Harris
2017-01-21Fix DKIM verify operation in -bh test mode. Bug 2017Jeremy Harris
2017-01-20fix example command-linePhil Pennock
2017-01-19VRFY: advertise in EHLO response, if there is an ACL definedJeremy Harris
2017-01-19VRFY: add docs note on results, and additional test casesJeremy Harris
2017-01-19Docs: add note on round-robin DNS problems vs. authenticationJeremy Harris
2017-01-18Bug-fix no_require_dnssec parsing & spelling fixesJosh Soref
Patches from Josh Soref fixing spelling fixed two bugs: * Parsing `no_require_dnssec` configuration option * Setting `_HAVE_TRANSPORT_APPEND_MAILDIR` macro (for config parsing) [ PP pulled these two out into a separate commit to update the ChangeLog accordingly. ]
2017-01-18214 spelling fixesJosh Soref
2017-01-11Docs: add note on DKIM ACL triggersJeremy Harris
2017-01-03CHUNKING: fix non-pipelined synch checks. Bug 2004Jeremy Harris
2017-01-02PROXY: fix v2 protocol decode. Bugs 2003, 1747Jeremy Harris
2017-01-02wip: OpenSSL docs on custom installPhil Pennock
To fix before merge: ability to use `$ORIGIN` in linker line via Exim config file.
2017-01-01Docs: fix smtp transport TFO option indexingJeremy Harris
2016-12-31Merge remote-tracking branch 'github/pr/50'Phil Pennock
GitHub user @YmrDtnJu "Björn" provided a patch to fix that we called ldap_start_tls_s on ldapi:// connections. This is obviously a correct change, since above we've avoiding initializing the TLS state if using ldapi. Added documentation noting this behaviour.
2016-12-30Docs: Add .new/wen marker for relative includes (Bug 1971)Heiko Schlittermann (HS12-RIPE)
2016-12-29Docs: typoesJeremy Harris
2016-12-29Allow relative file names in .include lines (Closes 1971)Heiko Schlittermann (HS12-RIPE)
2016-12-29Doc: Minor fixesHeiko Schlittermann (HS12-RIPE)
2016-12-29Pipe transport: expand the path optionJeremy Harris
2016-12-27Docs: clarify headers availability in data-time ACLsJeremy Harris
2016-12-26I18N: support IDNA2008. Bug 1911Jeremy Harris
2016-12-25Docs: Clean for next releaseJeremy Harris
2016-12-22Doc: clarify CVE-2016-9963Heiko Schlittermann (HS12-RIPE)
2016-12-18Doc: short description of CVE-2016-9963exim-4_88Heiko Schlittermann (HS12-RIPE)
2016-12-18Fix DKIM information leakageJeremy Harris
2016-12-16Docs: typoJeremy Harris
2016-12-13Use long names for the _DRIVER_*, and _OPT_* macrosHeiko Schlittermann (HS12-RIPE)
2016-12-09Doc: fix minor typosHeiko Schlittermann (HS12-RIPE)
2016-12-04OpenSSL: default to tls_eccurve = autoHeiko Schlittermann (HS12-RIPE)
For OpenSSL < 1.0.2: fallback to prime256v1, for newer libraries rely on auto-selection.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 04:02:12 +0000