Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-06-02 | Docs: add missing dollarsign | Jeremy Harris | |
2017-05-30 | Malware: make "sock" cmdline default usable. Bug 2111 | Jeremy Harris | |
2017-05-26 | doc: string2 not expanded, don't imply otherwise | Phil Pennock | |
A simple reading which skips the later paragraph would mislead people; this was remnant text from before the EXPAND_LISTMATCH_RHS changed the default behaviour. A couple of paragraphs later we contradicted this now-misleading parenthetical, but that's not enough. Nuke it. | |||
2017-05-20 | Use DH_bits for OpenSSL 1.1.0 | Phil Pennock | |
Fixes bug 2095 | |||
2017-05-19 | TLS: PIPELINING under OpenSSL | Jeremy Harris | |
2017-05-17 | TLS: do decent PIPELINING under TLS, at least with GnuTLS | Jeremy Harris | |
I've not found an equivalent in OpenSSL of gnutls_record_cork() nor gnutls_record_check_pending() yet. | |||
2017-05-09 | Add option commandline_checks_require_admin | Phil Pennock | |
May help with scenarios already so broken that bug report 2118 is actually an issue (Wordpress vuln). | |||
2017-05-06 | Enable use of sendfile on FreeBSD | Jeremy Harris | |
2017-05-06 | Teach SMTP input sync check ("input sent too soon") about SMTP input buffering | Jeremy Harris | |
2017-05-06 | Docs: add note on Received-By: header creation under cutthrough | Jeremy Harris | |
2017-04-30 | Fix continue_more on TLS connection. Bug 2104 | Jeremy Harris | |
2017-04-30 | Docs: more info on wire-format spoolfiles | Jeremy Harris | |
2017-04-29 | Docs: describe operation of continued-connection TLS | Jeremy Harris | |
2017-04-28 | Support wire-format spoolfiles | Jeremy Harris | |
2017-04-26 | Enable use of sendfile | Jeremy Harris | |
2017-04-24 | Docs: add 8BITMIME status field to log line info | Jeremy Harris | |
2017-04-24 | Docs: note that dkim_domain can take a list for signing | Jeremy Harris | |
2017-04-23 | DKIM: avoid use of temporary file for signing | Jeremy Harris | |
2017-04-18 | CHUNKING: pipeline data right after the BDAT command | Jeremy Harris | |
2017-04-15 | Transport: fix smtp under combo of mua_wrapper and limited max_rcpt | Jeremy Harris | |
2017-04-12 | $SOURCE_DATE_EPOCH support for build date stamp | Phil Pennock | |
If, and _only_ if, $SOURCE_DATE_EPOCH is found in environ during build, use it to set the timestamp embedded in the binary instead of using __DATE__ and __TIME__ cpp directives. This per <https://reproducible-builds.org/specs/source-date-epoch/> spec. It's sane and sensible, without removing date stamping which matters. The examples encourage packagers to use timestamps which do change when they backport patches, so that the date remains useful for distinguishing builds instead of claiming one date forever across multiple patchlevels. This change written so that the old behaviour and code is used if the environment variable is not found, to better continue to support ancient platforms with other variants of date(1). Built with and without an override, on macOS. | |||
2017-04-10 | Remove references to some csx.cam sites | Nigel Metheringham | |
The ftp.csx.cam.ac.uk server is no longer authoratative not even up to date. The training courses are no longer happening. | |||
2017-04-03 | Docs: expand descriptiong of control=debug | Jeremy Harris | |
2017-04-02 | Openssl: disable session-tickets by default and session-cache always | Jeremy Harris | |
2017-04-02 | Docs: fix definition of msg:fail:delivery event | Jeremy Harris | |
2017-03-24 | Documentation: replace http by https where possible | Heiko Schlittermann (HS12-RIPE) | |
I didn't change the schema for external links. This needs further checking if the content of https://… matches the content of http://… | |||
2017-03-22 | tidying | Jeremy Harris | |
2017-03-22 | Doc: clarify location of DMARC dmarc_tld_file | Heiko Schlittermann (HS12-RIPE) | |
2017-03-21 | Callouts: a "hold" option for receipient-verify, which keeps the connection ↵ | Jeremy Harris | |
open both for further recipients and for eventual delivery. | |||
2017-03-21 | Logging: make cipher info available for continued-TLS connection deliveries | Jeremy Harris | |
2017-03-18 | Expansions: check numeric values of IPv4 address components | Jeremy Harris | |
2017-03-15 | Logging: mark continued-TLS connection deliveries with "X-*" | Jeremy Harris | |
2017-03-12 | Malware: new connection type "f-prot6d" for FPSCAND protocol over TCP | Andrew Colin Kissa | |
2017-03-12 | Docs: fix description of tls_advertise_hosts | Jeremy Harris | |
2017-03-11 | uClibc does not contain gnu/libc-version.h | Bernd Kuhls | |
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> | |||
2017-03-08 | Shorten long daemon-startup log lines | Jeremy Harris | |
2017-03-08 | Docs: fix macro typo | Jeremy Harris | |
2017-03-07 | Delivery: contined-connection maintaining TLS | Jeremy Harris | |
2017-03-07 | Docs: clean for next release | Jeremy Harris | |
2017-03-03 | openssl.txt: stamp RPATH into library too | Phil Pennock | |
2017-02-28 | Document Jeremy's ref-count bug-fix as 4.89 JH/19 | Phil Pennock | |
2017-02-28 | Docs: add more Redis info | Jeremy Harris | |
2017-02-27 | Docs: tidy a table | Jeremy Harris | |
2017-02-26 | Add option to control use of shutdown by ${readsocket }. Bug 400 | Jeremy Harris | |
2017-02-26 | ChangeLog entry JH/18; applying to 4.89 release | Phil Pennock | |
2017-02-25 | DKIM: rework error logging to pass strings back to caller for logging. Bug 966 | Jeremy Harris | |
2017-02-25 | Memory Management: new main-section config option "debug_store" to control ↵ | Jeremy Harris | |
extra internal checking (cherry picked from commit 10919584f8ad580434442c7d971083f91c315bc0) Signed-off-by: Phil Pennock <pdp@exim.org> | |||
2017-02-23 | Docs: clarify non-applicability of the tls_eccurve option to GnuTLS | Jeremy Harris | |
2017-02-15 | Docs: Add commandline option used for chunking on continued connection | Jeremy Harris | |
2017-02-14 | Fix broken-in-queue messages predating CHUNKING fix | Phil Pennock | |
util/chunking_fixqueue_finalnewlines.pl walks the queue, fixing any affected messages; see README.UPDATING. We're extremely cautious about operation failure. We do one check without locking messages, so that we can quickly skip past before trying to lock and contending with an actual delivery. Then we lock and do another fix. Note that we use flock, not fcntl, because that's what Perl makes readily available; we use an OS-guard to barf if the OS is not handled. |