summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2012-03-21Merge branch 'dbmjz'Phil Pennock
2012-03-21heimdal_gssapi: accept SASL with empty authzidPhil Pennock
Saw this happening with Apple Mail; accept it, dup the GSS Display Name
2012-03-02Add dbmjz lookup typePhil Pennock
2012-02-19Log auth data in rejectlog.Phil Pennock
http://bugs.exim.org/attachment.cgi?id=547&action=edit fixes bug: 1214 Patch by Jeremy Harris
2012-02-18expand cyrus_sasl server_realm optionPhil Pennock
2012-02-18Merge branch 'sasl_fixes'Phil Pennock
2012-02-18Use gsasl_property_fast() in property callback.Phil Pennock
Avoids the loops which we only cancel out anyway.
2012-02-18Support pkg-config for SSL libraries.Phil Pennock
Also: update EDITME to refer to pkg-config & AUTH_HEIMDAL_GSSAPI.
2012-02-18Swap gsasl GSSAPI $auth1/$auth2Phil Pennock
2012-02-18Drop server_realm from heimdal_gssapiPhil Pennock
2012-02-18Minor cleanups.Phil Pennock
multi-blank-line protection never set the bool needed OID-method for keytab setting cleanup (drop <roken.h> and fix comments)
2012-02-17Use gsskrb5_register_acceptor_identityPhil Pennock
Drop the OID and pseudo-standard GSSAPI extension mechanism. Found Heimdal-specific API call I needed, works great. gsskrb5_register_acceptor_identity(filename) Separately: add various debug statements.
2012-02-15First pass heimdal_gssapi authenticator.Phil Pennock
Not yet working, failing to set keytab. Also: support (AUTH|LOOKUP)_*_PC=foo to use `pkg-config foo` for cflags/libs.
2012-02-05More bug-fixes, GSASL DIGEST-MD5 now works.Phil Pennock
Defined helper streqic() since I seem tired enough to be forgetting ==0 checks. Deal with left-over-data-to-send correctly. Now tested with PLAIN, CRAM-MD5, DIGEST-MD5. For DIGEST-MD5, check for server_realm, since GSASL doesn't error out without it.
2012-02-05remove stray globals blockPhil Pennock
2012-02-05Implemented gsasl driver for authentication.Phil Pennock
Missing: documentation; tests. Tested: PLAIN auth. Status: probably buggy
2012-02-04Various SASL fixes.Phil Pennock
Export $tls_bits new expansion variable (not yet documented). Fix tls-gnu.c so that ciphername string construction uses bit-count, not byte-count. Avoid hard-coding primary_hostname in first call to init Cyrus SASL. Cast fix for function pointer (Cyrus-SASL uses void params in struct entry funcptr, so need to cast). Many more debug statements in cyrus_sasl.c Pass external SSF from TLS cipher into Cyrus SASL initialisation. Detect when we can't get an identity from SASL properties (error out correctly). Detect when SASL negotiated a protection layer and error out, since we do not support those.
2011-11-30eximstats DATA reject detection regexps improved. Fixes: #1093Nigel Metheringham
2011-11-22Handle short writes on logfiles.Phil Pennock
fixes bug 1053
2011-11-13log_write EINTR handling on write()Phil Pennock
2011-11-10Parallel build fixes for lookupsPhil Pennock
Make lookups depend upon PHDRS not HDRS. Make parent dir depend upon child build target for lookups
2011-10-11PCRE_PRERELEASE is a bare sequence, not a string.Phil Pennock
2011-10-08Make README.UPDATING more explicit, with more examples, about the impact of ↵Phil Pennock
the match_<type> changes
2011-10-07exiqgrep: handle queue line size output too small for KPhil Pennock
2011-10-06rework userforward local_part_suffix documentationPhil Pennock
Loosely based on suggestion from Julian Gilbey. fixes bug 1139.
2011-10-06shut up bogus complaint of unused variable in new ratelimit ACL workexim-4_77_RC4Phil Pennock
2011-10-05Apply patch from Dmitry Isaikin fixing log.c format string.Phil Pennock
fixes bug 1152.
2011-10-05fix sub2_honour_dollar typeexim-4_77_RC3Phil Pennock
Was code correct before, but storing a ptr of 0 or 1, from bool initialiser. I meant to use a BOOL and it is more type-safe to do so, so fixed.
2011-10-05quote var for case stmt, so that old shell will see it as empty, rather than ↵Phil Pennock
syntax error
2011-10-05test for .git dir with -d not -e; more portablePhil Pennock
2011-10-05Solaris/Irix portability hacks for reversionPhil Pennock
2011-10-03source referenced version.sh file alwaysexim-4_77_RC2Phil Pennock
Tested for version.sh in cwd, but used . to source, assuming that would pull in file from cwd. True on BSD (checked after $PATH) but not part of POSIX and not true for bash when in POSIX mode.
2011-10-03PP/12 fix uninitialised greeting string from PP/03exim-4_77_RC1Phil Pennock
2011-10-03Merge branch 'list_safety'Phil Pennock
(gnutls fixes had updated some text docs)
2011-09-25EXPAND_LISTMATCH_RHS plumbed into build makefiles.list_safety_merge_proposalPhil Pennock
Tested builds both with and without this option, behaviour matches expectations.
2011-09-25match_* do not expand RHS, unconditionally.Phil Pennock
EXPAND_LISTMATCH_RHS define is checked, but not yet plumbed that into build system.
2011-09-25Implement inlist/inlisti expansion conditionsPhil Pennock
2011-09-24Document match_*/inlist changes (before coding starts)Phil Pennock
2011-09-24Make sure rc is initialisedPhil Pennock
2011-09-24Pull Andreas Metzler's fix for gnutls_certificate_verify_peers (bug 1095)Phil Pennock
2011-09-24TLS1.2 and TLS1.1 support with GnuTLSPhil Pennock
2011-09-05ssize_t for mime.cPhil Pennock
mime_decode_*() functions can return -1 for error, which would be lost when assigning to unsigned int. Sprinkled ssize_t across function return types and result variables.
2011-08-28Handle IPv6 addresses with SPF.Phil Pennock
Patch from Wolfgang Breyha. Also, slight improvements to some debug statements. fixes bug 860
2011-08-28Handle ${run} returning more data than OS pipe buffer size.Phil Pennock
Patch from Holger Weiß. fixes bug 1131
2011-08-27Make maildir_use_size_file expandable.Phil Pennock
Patch from Heiko Schlittermann. Fixes bug 1089
2011-08-27Stop build process more reliably on failure.Phil Pennock
Patch from Heiko Schlittermann. Fixes bug 1087
2011-08-27$av_failed variable set when av_scanner deferredPhil Pennock
Patch from John Horne. Fixes bug 1078
2011-08-27Use .dylib not .so for dynamic libraries on MacOSPhil Pennock
Not tested the drtables.c change for dynamically loaded lookups, only the readline loading for -be interactive mode.
2011-08-27Add protocol=smtps support to smtp transport.Phil Pennock
Permits SSL-on-connect for outbound connections. Heavily based on Simon Arlott's patch, but with enough modifications to risk new bugs. nb: am on a plane, change confirmed to compile on MacOS, nothing more fixes bug 97
2011-08-27Raise smtp_cmd_buffer_size to 16384.Phil Pennock
Needed to interoperate with SASL commands containing a large initial-response; in practice, GSSAPI with authorisation data, such as in a Windows domain. Patch from Paul Fisher. fixes bug 879