summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2014-11-11Handle UTC vs specified-timezone for certificate extractors. Bug 1541Jeremy Harris
2014-11-08Fix smtp transport certificate-verification option matching to use correct hostJeremy Harris
Fix certificate name verification done with tls_try_verify_hosts Affected tls_verify_hosts, tls_try_verify_hosts, tls_verify_cert_hostnames.
2014-11-06EXPERIMENTAL_CERTNAMES: Hostlist for cert name checks should match hostJeremy Harris
connected-to, not be list of acceptable names. The name checked is the host name.
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL, ↵Jeremy Harris
EXPERIMENTAL_CERTNAMES)
2014-11-05Do not permit multi-component wildcards on certificate names (OpenSSL)Jeremy Harris
2014-11-05Add doc examples for disabling SSLv3Jeremy Harris
2014-11-03Tweak docs on difference between "local" and "remote" source messagesJeremy Harris
2014-10-29Test suite: disable OCSP for old openssl part 2Todd Lyons
Make sure to only disable this if building for openssl, allow gnutls to build with OCSP for all versions that support it.
2014-10-26Expand commentary on certificate filesJeremy Harris
2014-10-25Add event for inbound cert visibilityJeremy Harris
2014-10-25Make transport name available in verify-callouts. Add verify_mode variableJeremy Harris
2014-10-25Rename facility to Event Actions, ifdeffed on EXPERIMENTAL_EVENTJeremy Harris
2014-10-16Handle certificate dir under GnuTLS, if recent enoughJeremy Harris
Add testcases for certificate directories The GnuTLS implementation has been tested on Fedora 21 (alpha), using GnuTLS 3.3.9. The testsuite case is here but with the script commented-out. When enabled, the log/mail/stdout/stderr files will be created fresh.
2014-10-05Remove limit on remove_headers item size. Bug 1533Jeremy Harris
2014-09-29Doc notes on expansion orderingJeremy Harris
2014-09-28Fix transport-results pipe for multiple recipients combined with certs.Wolfgang Breyha
The previous parsing failed when a result item split over a buffer boundary; fix by prefixing sizes to items, and checking enough has been read as the initial parsing stage.
2014-09-23ChangeLog for Github Issue 18Todd Lyons
2014-09-12Fix needless OCSP request under DANEJeremy Harris
usage 3 and with require_ocsp in play though inactive
2014-09-12Bug 1216: Add -M (related) to exigrep.Todd Lyons
Thanks to Arkadiusz for pointing out that this was never merged.
2014-09-08doc typoJeremy Harris
2014-09-06Add expansion item for sorting listsJeremy Harris
2014-09-06Support secondary-separator specifier for MX, SRV and TLSA dnsdb lookupsJeremy Harris
2014-09-05Merge branch 'master_condition_description'Todd Lyons
2014-09-05Bug 1518: fix description of condition processingTodd Lyons
The description in the first commit was completely wrong. Thanks to Phil for setting me straight and seeding me with the correct verbage.
2014-09-04Enforce TLS under DANE when host has TLSA recordsJeremy Harris
2014-09-02Introduce EXPERIMENTAL_DANE featureJeremy Harris
2014-09-02ChangeLog entryJeremy Harris
2014-09-01Warn on OCSP interaction with DANEJeremy Harris
2014-08-31Add missing puctuationJeremy Harris
2014-08-31Further doc examples for ldap lookup outputHeiko Schlittermann
2014-08-28Bugzilla 1518: Clarify router "condition" parsingTodd Lyons
2014-08-27Further TPDA eventsJeremy Harris
msg:complete msg:fail:internal msg:fail:delivery
2014-08-27Add doc detail on ldap lookup output parsingJeremy Harris
2014-08-20Update change logJeremy Harris
2014-08-20Merge branch 'master' into daneJeremy Harris
Conflicts: doc/doc-txt/ChangeLog src/src/tls-openssl.c src/src/transports/smtp.c src/src/verify.c
2014-08-20Expanded EXPERIMENTAL_TPDA featureJeremy Harris
Note this introduces incompatible changes; users who are compiling the feature in, and with configuration files using it, will need to change their configurations appropriately. See the experimental-spec.txt file.
2014-08-17Update DANE draft docsJeremy Harris
2014-08-17Properly detect/set test variables from scripts.Todd Lyons
2014-08-17Override an unchanged default hosts_request_ocsp when DANE is usedJeremy Harris
2014-08-17Add sha256 operator usageJeremy Harris
2014-08-17Add observability variables and provision for avoiding OCSP conflictsJeremy Harris
2014-08-16Clarify docs on ldap alternate servers listJeremy Harris
2014-08-14Clean docs for next releaseJeremy Harris
2014-08-14ChangeLog entry for OpenBSD 5.5 patchTodd Lyons
2014-08-14Properly detect/set test variables from scripts.Todd Lyons
2014-08-10Enable OCSPJeremy Harris
2014-08-10Verifiable conn with DANE-EE(3) / SPKI(1) / SHA2-512(2)Jeremy Harris
2014-08-10Diffs for draft 11Jeremy Harris
2014-08-10Copy latest SMTP-with-DANE - draft 11Jeremy Harris
2014-08-09Doc updates for work since 4.83exim-4_84Jeremy Harris