summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2019-10-18Change the default of dnssec_request_domains to '*'Heiko Schlittermann (HS12-RIPE)
2019-10-17OpenSSL: full-chain OCSP stapling. Bug 1466Jeremy Harris
2019-10-15OpenSSL: SSLKEYLOGFILE supportJeremy Harris
2019-10-12SRS: add basic documentationJeremy Harris
2019-10-06Docs: fix syntaxJeremy Harris
2019-10-06GnuTLS: lose DH-param setup, for recent library versions where no longer neededJeremy Harris
2019-10-04Events: Add smtp:ehlo eventJeremy Harris
2019-10-02DSN: add References: header. Bug 2452Jeremy Harris
2019-09-29OpenSSL: fix build on earlier library versionsJeremy Harris
2019-09-29OpenSSL: support OCSP stapling on multi-cert serversJeremy Harris
2019-09-29tidyingJeremy Harris
2019-09-28Docs: add dmarc_tld_file linkHeiko Schlittermann (HS12-RIPE)
2019-09-26GnuTLS: full-chain OCSP stapling. Bug 1466Jeremy Harris
2019-09-22DNS: do not skip initial two components of SRV & TLSA lookups before ↵Simon Arlott
checking name syntax. The introduction of DKIM added _ to the permitted chars, so those components will pass.
2019-09-22DMARC: promote the support from Experimental to mainlineJeremy Harris
2019-09-22Docs: expansion items should use &%name%&Jeremy Harris
2019-09-21Docs: usability of malware ACL conditionJeremy Harris
2019-09-20GnuTLS: Move to more-modern stapling APIJeremy Harris
2019-09-19Docs: more detail on log_file_path, in the main-config chapterJeremy Harris
2019-09-17Docs: Adjust on TLSA, dnssec_request_domainsHeiko Schlittermann (HS12-RIPE)
2019-09-15Doc: Improve pointer to DKIM signing optionsHeiko Schlittermann (HS12-RIPE)
2019-09-13Doc: TyposHeiko Schlittermann (HS12-RIPE)
2019-09-10tidyingJeremy Harris
2019-09-08string.c: do not interpret '\\' before '\0' (CVE-2019-15846)Heiko Schlittermann (HS12-RIPE)
Add documents about CVE-2019-15846 Add testcase for CVE-2019-15846 Update Changelog Add Announcements (cherry picked from commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4, 6693563381 and cdc7f9a966)
2019-09-01Support TTL from SOA for NXDOMAIN & NODATA cache entries. Bug 1395Jeremy Harris
2019-08-29Testcase for handling of -H files for excessive long '-KEY' linesHeiko Schlittermann (HS12-RIPE)
Thanks to Qualys for their analysis. This bug was fixed independently by JGH. Tidy.
2019-08-15Appendfile: when evaluating quota use attemd to link countsJeremy Harris
2019-08-11DKIM: preferences for verify algorithmsJeremy Harris
2019-08-10Routers: make retry_use_local_part default true when any non-domain ↵Jeremy Harris
condition is present. Bug 2408
2019-08-04Lookups: support IPv6 addresses in the spf lookup type. Bug 2378Jeremy Harris
2019-08-03Callouts: filter smtp response for bad chars before using in our smtp ↵Jeremy Harris
response. Bug 2409
2019-07-28Fix crash after TLS channel shutdownJeremy Harris
2019-07-25Fix dkim_strict expansion. Bug 2413Ruben Jenster
Broken since the introduction of dkim support. Testsuite additions by jgh
2019-07-25Track tainted data and refuse to expand itJeremy Harris
2019-07-25Avoid re-expansion in ${sort }Jeremy Harris
2019-07-17Docs: more indexing for sighupJeremy Harris
2019-07-15Router variables: change list-separator to semicolonJeremy Harris
2019-07-15Docs: add note on unusablility of must-staple certs by clients. Bug 2350Jeremy Harris
2019-07-11Keep router-variables separate on addrs, to avoid taint contaminationJeremy Harris
2019-07-08Routers: named variablesJeremy Harris
2019-07-08Docs: more indexingJeremy Harris
2019-06-29Fix bounce generation under RFC 3461 request. Bug 2411Jeremy Harris
Broken-by: ea97267cea
2019-06-27Docs: add note on effects of disabling IPv6 lookupsJeremy Harris
2019-06-26Fix DSN Final-Recipient: fieldJeremy Harris
2019-06-26tidyingJeremy Harris
2019-06-05Fix smtp response timeoutJeremy Harris
2019-06-05Use dsn_from for success-DSN messages. Bug 2404Jeremy Harris
2019-06-05Unbreak heimdal_gssapi auth driverPhil Pennock
Commit 251b9eb46 broke heimdal_gssapi by changing the function definition in the `.c` without changing the declaration in the `.h`. Was part of 4.92. Make corresponding `.h` change to reflect newer internal API.
2019-05-28PIPE_CONNECT: promote from experimentalJeremy Harris
2019-05-28PIPE_CONNECT: avoid using when the transport helo_data uses $sending_ip_addressJeremy Harris