user/henk/code/exim.git - [no description]

Age	Commit message (Collapse)	Author
2012-07-01	Merge branch 'acl'	Jeremy Harris

2012-06-27	Acl expansions: tests and documentation	Jeremy Harris

2012-06-25	Let Linux makefile inherit CFLAGS/CFLAGS_DYNAMIC.	Phil Pennock
	Pulled from Debian 30_dontoverridecflags.dpatch by Andreas Metzler. We just add CFLAGS_DYNAMIC too and some comments. Non-POSIX syntax, but fairly portable; GNU make gained it in 1998, we believe even very old systems should handle it fine.
2012-06-24	Add gnutls_enable_pkcs11 option.	Phil Pennock
	GnuTLS 2.12.0 adds PKCS11 support using p11-kit and by default will autoload modules, which interoperates badly with GNOME keyring integration, configured via paths in environment variables, and Exim invoked by the user (eg, mailq) will then try to load the modules, fail and spew warnings from the module for a library loaded by a library. http://www.gnu.org/software/gnutls/manual/gnutls.html#Smart-cards-and-HSMs documents that to prevent this, explicitly init PKCS11 before calling gnutls_global_init(). So we do so, unless the admin sets the new option. Reported by Andreas Metzler, who confirmed that the added calls fixed the problem for him.
2012-06-12	Use custom variables for ACL args, up to nine. Add an arg-count variable.	Jeremy Harris

2012-06-12	Add ${acl {name}{arg}} expansion item.	Jeremy Harris

2012-06-12	Merge branch 'lists'	Jeremy Harris

2012-06-12	Change names to "listnamed" and "listcount".	Jeremy Harris

2012-06-10	Add ${list:name} and ${nlist:string} expansion operators.	Jeremy Harris

2012-06-09	Corrections to spec examples - fixes bug 1196	Nigel Metheringham

2012-06-09	Typo fix in spec - fixes bug 1197	Nigel Metheringham

2012-06-06	BUGFIX: forced-fail smtp option tls_sni would dereference NULL	Phil Pennock

2012-06-05	Docs for "G" modifier on numbers in ${if comparisons.	Jeremy Harris

2012-06-04	Basic documentation for cutthrough.	Jeremy Harris

2012-06-04	Add $tls_in_* variables; note the old names as deprecated.	Jeremy Harris

2012-06-04	Add hosts_verify_avoid_tls option to smtp transport.	Jeremy Harris

2012-06-04	Refactor optional MAIL FROM args	Todd Lyons

2012-06-03	Implement -G => "control=suppress_local_fixups"	Phil Pennock
	fixes bug 1117
2012-06-03	Cmdline -L option; also -Ac -Am -X<logfile>	Phil Pennock
	These are for Sendmail compatibility. bug 1117
2012-06-03	ChangeLog: note cyrus plugin use situation	Phil Pennock

2012-06-03	Cyrus SASL: set host;port properties on auth driver	Phil Pennock

2012-06-03	DSCP: inbound via control = dscp/<value>	Phil Pennock

2012-06-02	Docs: pipes in redirect, need for quote caution	Phil Pennock

2012-06-02	DSCP: take numeric values too.	Phil Pennock
	Also fix doc claim that value is unexpanded. Also strip affix whitespace before numeric conversion and fixed string comparison.
2012-06-02	DSCP: document; hex print; -bI:dscp	Phil Pennock

2012-06-01	DNSSEC babystep: dns_use_dnssec & $sender_host_dnssec	Phil Pennock

2012-06-01	ACKNOWLEDGEMENTS update, covering a few years	Phil Pennock

2012-06-01	tls_dh_min_bits smtp transport option	Phil Pennock
	Could not find an API for use with OpenSSL, so GnuTLS only
2012-06-01	Make -n combine with -bP to inhibit names	Phil Pennock

2012-06-01	Add -bI:help and -bI:sieve	Phil Pennock

2012-05-31	Doc: drop .new/.wen, update previousversion.	Phil Pennock
	Also, drop fix one place which claimed TLS SNI support was OpenSSL only.
2012-05-30	Revert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512."exim-4_80	Phil Pennock
	This reverts commit 83f4c7515f3eb06dc070e78edd2694c1d088e5fd. This was not a new check! The call to gnutls_dh_set_prime_bits() was made with DH_BITS in Exim 4.77, so the only difference is that now an administrator can choose at compile time to change the lower bound. So keeping this at 1024 is not a regression and if we can't talk to them now, we couldn't before, and we shouldn't lower security by default. The reverted commit was only acceptable IF it was still better than what we had in Exim 4.77.
2012-05-30	Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512.	Phil Pennock
	Wolfgang Breyha saw a real-world site using 768 bits.
2012-05-28	Merge openssl_disable_ssl2 branchexim-4_80_RC7	Phil Pennock

2012-05-27	Doc: fix glitchexim-4_80_RC6	Phil Pennock

2012-05-27	Doc: SECTgnutlsparam referencing tls_dhparam	Phil Pennock

2012-05-27	For DH, use standard primes from RFCs	Phil Pennock

2012-05-27	Deal with GnuTLS DH generation overshoot	Phil Pennock

2012-05-26	FAQ for GnuTLS	Phil Pennock

2012-05-25	Doc: Provide context for bare numbers from CHAP/SECT.	Phil Pennock

2012-05-25	Cyrus SASL auth: SSF retrieval was incorrect.	Phil Pennock
	Exim thought protection layer was required, which is not implemented. Patch from Wolfgang Breyha. Fixes bug 1254
2012-05-24	Added some more .gitignore entries	Nigel Metheringham
	Ignore more build side effects
2012-05-23	_ISOC99_SOURCE -> _GNU_SOURCEexim-4_80_RC5	Phil Pennock
	_ISOC99_SOURCE broke build on Linux (Ubuntu 11.10) because it broke <resolv.h>, <arpa/nameser.h>, etc. Their u_char and u_int usage relies upon BSD source being enabled too. So use _GNU_SOURCE.
2012-05-23	Define _ISOC99_SOURCE in exim.h	Phil Pennock
	Done before os.h is pulled in so an OS can override it.
2012-05-23	Doc: move -bmalware into alphabetic place	Phil Pennock

2012-05-23	Doc: s/DNS/domains/ in new text	Phil Pennock

2012-05-23	Doc: document when dnslookup will decline	Phil Pennock

2012-05-23	Doc: tls_require_ciphers examples	Phil Pennock
	Note how to test strings, provide examples which distinguish port 25 from other ports. Carefully used short examples, but allows two different strings per implementation and demonstrates how the strings are very different.
2012-05-22	OCSP description: minor nits	Phil Pennock

2012-05-21	.end -> .wenexim-4_80_RC4	Phil Pennock