summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2014-08-10Verifiable conn with DANE-EE(3) / SPKI(1) / SHA2-512(2)Jeremy Harris
2014-08-10Add support in the fakens utility for TLSA recordsJeremy Harris
2014-08-10On a host lookup name->MX->A->ip sequence, require both stages toJeremy Harris
be dnssec before declaring the lookup was secure.
2014-08-08Test developmentJeremy Harris
2014-08-08Testsuite basics.Jeremy Harris
Not actually excercising DANE yet, this will take additions in the fakedns and probably changes in certificates.
2014-08-07Sketch in library interfaceJeremy Harris
2014-08-01Fix development-testing induced crash on second useJeremy Harris
2014-08-01Basic DANE entry pointsJeremy Harris
2014-07-31Add interface documentation for the DANE libraryJeremy Harris
2014-07-29Coding style closer to project normsJeremy Harris
2014-07-29Create a hosts_try_dane transport option, does nothing yetTodd Lyons
2014-07-29Framework to build dane supportTodd Lyons
2014-07-23Bug 1506: Silence static checkers.Lars Mueller
Re-adds a return NULL which was removed because it was redundant. Static checkers don't parse the logic, so adding it back to make them happy.
2014-07-23Bug 1506: Fix static typechecker outputTodd Lyons
The end of the function can never be reached because the switch is only reached if the value it is checking is valid. Putting this return silences the warnings.
2014-07-22Massage coding style to project normJeremy Harris
2014-07-16Only expand integers for integer math onceTony Finch
2014-07-14Fix parsing of mime headersJeremy Harris
RFC2045 allows parameter values to be quoted; an embedded semicolon must then not terminate the parameter.
2014-07-14DNSSEC: fix clang warning re && in || precedencePhil Pennock
I looked and AFAICT the compiler guidance gives the correct logical binding for the code intention. ``` dnsdb.c:362:32: warning: '&&' within '||' [-Wlogical-op-parentheses] || dnssec_mode == DEFER && !dns_is_secure(&dnsa) ~~ ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~ dnsdb.c:362:32: note: place parentheses around the '&&' expression to silence this warning || dnssec_mode == DEFER && !dns_is_secure(&dnsa) ^ ( ) ```
2014-07-14MacOS: fix clang redef warningPhil Pennock
2014-07-14Use Ustrlen() on a uscharPhil Pennock
2014-07-14Fix unsigned < 0 checkPhil Pennock
Two places in malware.c were using `fsize`, defined as `unsigned int`, to receive the result of `lseek()` and then checking if the value was less than 0. As clang says: ``` malware.c:1228:46: warning: comparison of unsigned expression < 0 is always false [-Wtautological-compare] if ((fsize = lseek(clam_fd, 0, SEEK_END)) < 0) { ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ ~ ``` Fix. Use `off_t`, which we're already using elsewhere, then use `fsize_uint` to handle off_t being potentially 64-bit, and a sanity-check on conversion which hopefully won't be optimised away by compilers.
2014-07-14Rename T_APL to T_ADDRESSESPhil Pennock
Fixes Github issue #15 Known DNS RRTYPE aliases can be found at <http://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml> and `T_APL` conflicts with the `APL` RRTYPE, Address Prefix List, in experimental RFC 3123. Issue reported compilation issues on OpenBSD. Instead, use `T_ADDRESSES`.
2014-07-13Fix TLS SNI, and add regression test casesJeremy Harris
2014-07-08Reinstate SNI variables under GnuTLS. Bug 1499exim-4_83_RC3Jeremy Harris
2014-07-03Add cscope files to git ignore listTodd Lyons
2014-07-02Bug 1495: Exiqgrep -C check configfile readabilityAndrew Colin Kissa
2014-06-20Use enum for var_entry typeJeremy Harris
2014-06-17Fix build dependenciesHeiko Schlittermann
"make distclean; make -j" was failing on config.h
2014-06-15Fix testcase 0373Jeremy Harris
A readsocket expansion against a unix-domain socket which is immediately closed. This gave variable results does to the race of the write into the client-end versus the close at the server end. Insert under-testsuite delays to assure sequencing; the testcase now specifically looks for a write into a closed peer.
2014-06-11Fix dkim for no-key case under SENDFILE compile. Bug 934Wolfgang Breyha
Tested-by: <wbreyha@gmx.net>
2014-06-11Tidy coding style. Bug 934Jeremy Harris
2014-06-08Use strict C89 variable declaration positioningJeremy Harris
2014-06-06Initial set of warnings for the upcoming releaseJeremy Harris
2014-06-06More care with time typesJeremy Harris
2014-06-05Fix udpsend and ip_connectedsocket().exim-4_83_RC2Tony Finch
The ip_connectedsocket() function's socket type support and error reporting did not work properly.
2014-06-05Tidy up OpenSSL certificate signature & sig_algorithm extractor results.Jeremy Harris
Bug 1489
2014-06-04Compiler quieteningJeremy Harris
2014-06-04Ensure output buffer big enough for DSN additions to MAIL FROM. Bug 1482Jeremy Harris
2014-05-31Support service names for tls_on_connect_ports. Bug 72Jeremy Harris
2014-05-30Fix no-ssl buildJeremy Harris
2014-05-29Fix delivery $host in client authenticator in verify/callout. Bug 1476Jeremy Harris
2014-05-29Log warnings on presence of deperecated optionsJeremy Harris
2014-05-29Fix dnssec dnsdb lookup in defer_never modeJeremy Harris
2014-05-28Bug 1444: Fix \r\n handling writing spool fileTodd Lyons
Fix a bug which causes DKIM signatures to fail because what gets written to the spool file is different than what gets passed through the DKIM code.
2014-05-28Merge tag 'exim-4_82_1'exim-4_83_RC1Todd Lyons
Fix Conflicts: src/src/dmarc.c
2014-05-26SECURITY: DMARC uses From header untrusted dataexim-4_82_1Todd Lyons
CVE-2014-2957 To find the sending domain, expand_string() was used to directly parse the contents of the From header. This passes untrusted data directly into an internal function. Convert to use standard internal parsing functions.
2014-05-26Increase limit of smtp_confirmation logging from 100 to 256 chars. Bug 1408Jeremy Harris
2014-05-26Errorcheck TLS library callsJeremy Harris
2014-05-26Restrict certificate name checkin for wildcards.Jeremy Harris
On more recent OpenSSL library versions the builtin wildcard checking can take a restriction option that we want, to disallow the more complex possibilities of wildcarding.
2014-05-25Missing initialiserJeremy Harris
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-01 19:17:20 +0000