summaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2017-04-02Openssl: disable session-tickets by default and session-cache alwaysJeremy Harris
2017-04-02Docs: fix definition of msg:fail:delivery eventJeremy Harris
2017-03-24Documentation: replace http by https where possibleHeiko Schlittermann (HS12-RIPE)
I didn't change the schema for external links. This needs further checking if the content of https://… matches the content of http://…
2017-03-22tidyingJeremy Harris
2017-03-22Doc: clarify location of DMARC dmarc_tld_fileHeiko Schlittermann (HS12-RIPE)
2017-03-21Callouts: a "hold" option for receipient-verify, which keeps the connection ↵Jeremy Harris
open both for further recipients and for eventual delivery.
2017-03-21Logging: make cipher info available for continued-TLS connection deliveriesJeremy Harris
2017-03-18Expansions: check numeric values of IPv4 address componentsJeremy Harris
2017-03-15Logging: mark continued-TLS connection deliveries with "X-*"Jeremy Harris
2017-03-12Malware: new connection type "f-prot6d" for FPSCAND protocol over TCPAndrew Colin Kissa
2017-03-12Docs: fix description of tls_advertise_hostsJeremy Harris
2017-03-11uClibc does not contain gnu/libc-version.hBernd Kuhls
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
2017-03-08Shorten long daemon-startup log linesJeremy Harris
2017-03-08Docs: fix macro typoJeremy Harris
2017-03-07Delivery: contined-connection maintaining TLSJeremy Harris
2017-03-07Docs: clean for next releaseJeremy Harris
2017-03-03openssl.txt: stamp RPATH into library tooPhil Pennock
2017-02-28Document Jeremy's ref-count bug-fix as 4.89 JH/19Phil Pennock
2017-02-28Docs: add more Redis infoJeremy Harris
2017-02-27Docs: tidy a tableJeremy Harris
2017-02-26Add option to control use of shutdown by ${readsocket }. Bug 400Jeremy Harris
2017-02-26ChangeLog entry JH/18; applying to 4.89 releasePhil Pennock
2017-02-25DKIM: rework error logging to pass strings back to caller for logging. Bug 966Jeremy Harris
2017-02-25Memory Management: new main-section config option "debug_store" to control ↵Jeremy Harris
extra internal checking (cherry picked from commit 10919584f8ad580434442c7d971083f91c315bc0) Signed-off-by: Phil Pennock <pdp@exim.org>
2017-02-23Docs: clarify non-applicability of the tls_eccurve option to GnuTLSJeremy Harris
2017-02-15Docs: Add commandline option used for chunking on continued connectionJeremy Harris
2017-02-14Fix broken-in-queue messages predating CHUNKING fixPhil Pennock
util/chunking_fixqueue_finalnewlines.pl walks the queue, fixing any affected messages; see README.UPDATING. We're extremely cautious about operation failure. We do one check without locking messages, so that we can quickly skip past before trying to lock and contending with an actual delivery. Then we lock and do another fix. Note that we use flock, not fcntl, because that's what Perl makes readily available; we use an OS-guard to barf if the OS is not handled.
2017-02-14Fix missing line termination on the last received BDAT chunk (Bug 1974)Heiko Schlittermann (HS12-RIPE)
2017-02-12Handle PKG_CONFIG_PATH in Local/MakefilePhil Pennock
Handle PKG_CONFIG_PATH, stripping whitespace expanding globs, collecting multiple sets and just build one variable, and use it in environment at configure time so that the libraries are found.
2017-02-12Forward-port ChangeLog entries written for release branchexim-4.90devstartPhil Pennock
2017-02-124.89 JH/17 -> 4.90 JH/01Phil Pennock
2017-02-11Fix missing Changelog entries for recent workPhil Pennock
2017-02-10TLS: rework error logging to pass more string back to caller for loggingJeremy Harris
This permits a library-sourced error to be associated with an address being delivered, collapsing pairs of log lines
2017-02-08Memory management: drop variables identified as going out-of-scopeJeremy Harris
Fixes crash in transport re-using bad $sender_ip_address from callout
2017-02-07DocÖ Fix typo about spf lookup (experimental)Heiko Schlittermann (HS12-RIPE)
2017-02-06doc-fix: reference current libsrs_alt availabilityPhil Pennock
Matches site from Wiki, from Google SERP, etc.
2017-02-02FreeBSD: Perl no longer in /usr/bin from PortsPhil Pennock
FreeBSD Ports by policy no longer allows symlinks in /usr/bin for things like Perl, so we have to look in /usr/local/bin for it instead.
2017-02-02Spec docs for IDNA2008 supportPhil Pennock
2017-01-31Proxy clarification & nit fixes.Phil Pennock
Release: should be cherry-picked into 4.89RC series
2017-01-31Handle Proxy Protocol v2 safely as well.Phil Pennock
We had test suite failures (test suite success!) because Proxy Protocol v2 (PPv2) wasn't being detected; by only reading 12 octets, the >= 16 check was failing. But in fact I had previously only fixed reading "only enough" for PPv1. Handling both PPv1 and PPv2 is complicated because the minimum valid length for PPv1 is 15 octets but for PPv2 the size to read is in the 15th and 16th octets. So refactored a little and we now use a total of 3 reads for the PPv2 case (assuming no fragmentation, etc; we'll actually keep reading now instead of aborting) to get the entire PPv2 header of exactly the right size, so that TLS handshake immediately following the PP header is not also swallowed. Fixes: 2018 Tested: manually, TLS and non-TLS, PPv1 and PPv2, all ways. Release: should be cherry-picked into 4.89RC series
2017-01-30Copyright year bumps for substantive changes 2017exim-4_89_RC1Phil Pennock
2017-01-30Document that fixed 2018Phil Pennock
Fixes: 2018
2017-01-30Restrict address-parsing to a maximum of five layers of nested angle-brackets,Jeremy Harris
under main-option strip_excess_angle_brackets
2017-01-29Update change logJeremy Harris
2017-01-29CHUNKING: Reject messages with malformed line ending. Bug 2000Jeremy Harris
Actually test only the first header line, but still do full line-ending canonicalisation on the remainder of the message in case a Evil Person slips past that.
2017-01-29Docs: add note on verify = senders= . Bug 2028Jeremy Harris
2017-01-28Docs: add note on system_filter forced expansion failJeremy Harris
2017-01-22Document OpenBSD resolver ignoring EDNS0Phil Pennock
2017-01-22DKIM: permit verify of sig blocks that sign other sig blocks. Bug 2014Jeremy Harris
2017-01-21Fix DKIM verify when used with CHUNKING. Bug 2016Jeremy Harris