summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2014-10-25Add event for inbound cert visibilityJeremy Harris
2014-10-25Make transport name available in verify-callouts. Add verify_mode variableJeremy Harris
2014-10-25Rename facility to Event Actions, ifdeffed on EXPERIMENTAL_EVENTJeremy Harris
2014-10-22Make $host available in tpda delivery event, for cutthrough. Bug 1529Jeremy Harris
2014-10-22More regular logging use of H=<name> [<ip>]Jeremy Harris
Note this may affect utilities which parse logs.
2014-10-16Handle certificate dir under GnuTLS, if recent enoughJeremy Harris
Add testcases for certificate directories The GnuTLS implementation has been tested on Fedora 21 (alpha), using GnuTLS 3.3.9. The testsuite case is here but with the script commented-out. When enabled, the log/mail/stdout/stderr files will be created fresh.
2014-10-12Make dnssec status available in tpda delivery event, for cutthroughJeremy Harris
2014-10-12Quieten noisy compilerJeremy Harris
As usual, gcc whining that perfectly valid C coding is "ambiguous". Wrongly.
2014-10-05Remove limit on remove_headers item size. Bug 1533Jeremy Harris
2014-09-29Fix Solaris buildJeremy Harris
2014-09-28Fix transport-results pipe for multiple recipients combined with certs.Wolfgang Breyha
The previous parsing failed when a result item split over a buffer boundary; fix by prefixing sizes to items, and checking enough has been read as the initial parsing stage.
2014-09-25Clarify error message for host-connect fail. Bug 1505Jeremy Harris
2014-09-25Amplify comment on server requests for client certificatesJeremy Harris
2014-09-23Merge remote-tracking branch 'exim_github/pr/18'Todd Lyons
2014-09-16Replace use of index() with Ustrchr()Jeremy Harris
2014-09-13Restrict dane to DANE-TA(2) and DANE-EE(3) usage TLSA recordsJeremy Harris
Also, just ignore TLSA records with unsipported match types.
2014-09-12Fix needless OCSP request under DANEJeremy Harris
usage 3 and with require_ocsp in play though inactive
2014-09-12Bug 1216: Add -M (related) to exigrep.Todd Lyons
Thanks to Arkadiusz for pointing out that this was never merged.
2014-09-11Fix ldap lookup for single-attr request, multiple-attr return. Bug 1521Heiko Schlittermann
Exim documented behaviour is that the single-request case controls the output format (by not labelling attributes with names). The code is broken for the case where attrs B, C are derived from A and A is requested (and the LDAP server used isn't buggy here; some are and only return A rather than A, B, C).
2014-09-11Add debug for number of CA certs, for OpenSSL/file loadJeremy Harris
2014-09-10Fix undersized buffer use by eximon. Bug 1527Jeremy Harris
The long spoolfile line now used for certificate info was too big, resulting in an apparent syntax error in the file. Apart from using a decent size, do autogrow in case of immense certificates.
2014-09-10TPDA tidyingJeremy Harris
2014-09-06Add expansion item for sorting listsJeremy Harris
2014-09-06Support secondary-separator specifier for MX, SRV and TLSA dnsdb lookupsJeremy Harris
2014-09-04Enforce TLS under DANE when host has TLSA recordsJeremy Harris
2014-09-02Fix ${extract expansion for use within ${if inlist etc. Bug 1524Jeremy Harris
The coding of the numeric test on the key decided that empty was numeric, and insisted on a third substring even in syntax-check "skip" mode. This failed when a single expansion variable was used for the key (eg. $item) and the defaults for string2, string3 were being assumed. Skip the test in skip mode.
2014-09-02Introduce EXPERIMENTAL_DANE featureJeremy Harris
2014-09-02redis lookup returns false for things that should be trueSebastian Wiedenroth
If redis returns an integer the lookup code currently checks if the value is 1 and returns false for all other values. This is problematic if you want to use redis commands that return counts (ZCARD etc.) because you can't check for "does not exist" or "exists at least once". (It will be 0->false, 1->true, 2 or more-> false again) This commit changes the code to handle integer values like C: 0 is false and everything else is true. For the simple 0 and 1 values nothing changes to existing queries so this diff is backwards compatible. For queries that return other values exim now gets the bool that would be expected.
2014-08-31Update commentJeremy Harris
2014-08-29Fix crash in mime acl when a parameter is zero-lengthJeremy Harris
2014-08-27Further TPDA eventsJeremy Harris
msg:complete msg:fail:internal msg:fail:delivery
2014-08-20Merge branch dane-tpda into daneJeremy Harris
Conflicts: doc/doc-txt/experimental-spec.txt src/src/deliver.c src/src/functions.h src/src/smtp_out.c src/src/tls-openssl.c src/src/transports/smtp.c src/src/verify.c
2014-08-20Merge branch 'master' into daneJeremy Harris
Conflicts: doc/doc-txt/ChangeLog src/src/tls-openssl.c src/src/transports/smtp.c src/src/verify.c
2014-08-20Expanded EXPERIMENTAL_TPDA featureJeremy Harris
Note this introduces incompatible changes; users who are compiling the feature in, and with configuration files using it, will need to change their configurations appropriately. See the experimental-spec.txt file.
2014-08-18Merge remote-tracking branch 'exim_github/pr/16'Todd Lyons
2014-08-17Safer coding for utf8clean expansion operatorJeremy Harris
2014-08-17Log an error (instead of hanging) if Dovecot auth is configured to use the ↵Timo Sirainen
wrong auth-master/auth-userdb socket.
2014-08-17Unbreak utf8clean testcase.Jeremy Harris
Broken by my compile quitening; the issue was a variable declared local in a loop body and used for carrying data from one iteration to the next. I'd blindly added an initialiser, destroying the data. However, I *think* that compilers might be at liberty to not use the same location for separate iterations; if so the code was broken (and only worked by chance). Fix by moving the declaration outside the loop.
2014-08-17Override an unchanged default hosts_request_ocsp when DANE is usedJeremy Harris
2014-08-17Feature compile-guardJeremy Harris
2014-08-17Add observability variables and provision for avoiding OCSP conflictsJeremy Harris
2014-08-16Break out dane code to separate functionsJeremy Harris
2014-08-15Compiler quieteningJeremy Harris
2014-08-14Fix fakens TLSA generation and DANE TLSA lookupJeremy Harris
2014-08-14Fix non-dane buildJeremy Harris
2014-08-14OpenBSD 5.5 removed arc4random_stirTodd Lyons
2014-08-11Do not sleep for tiny periods, or hang trying to sleep for zero. Bug 1426Jeremy Harris
2014-08-11Better logging of OCSP failsJeremy Harris
2014-08-10Enable OCSPJeremy Harris
2014-08-10Change CV= log line element for dane-verified certJeremy Harris
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-25 21:18:19 +0000