summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2014-05-21RFC3461 support - MIME DSN messages. Bug 118Wolfgang Breyha
2014-05-21Eliminate one foolish way to break the buildJeremy Harris
2014-05-21Add PRDR feature output in -bVTodd Lyons
2014-05-20Support optional server certificate name checking. Bug 1479Jeremy Harris
Enable EXPERIMENTAL_CERTNAMES to include.
2014-05-20Final tidyout of EXPERIMENTAL_PRDRJeremy Harris
2014-05-17Use accessor functions for OpenSSL internal dataJeremy Harris
2014-05-16General tidyingJeremy Harris
2014-05-16Tidy certificate verification logic under OpenSSLJeremy Harris
2014-05-13Extractors for certificate time fields support integer output modifierJeremy Harris
2014-05-13Extractor for named RDN element types from a certificate DN field.Jeremy Harris
2014-05-13Bug 1394: PPv2 header modifedTodd Lyons
The HAProxy dev team adjusted the layout of the 16 byte header to allow it to be used for SSL connections. Had to adjust PPv2 handling code and perl proxy emulation script. Added link to this HAProxy commit in the documentation.
2014-05-13Fix cert fingerprint path to deny noncertsJeremy Harris
2014-05-13certextract tidyingJeremy Harris
2014-05-13Move PRDR out of EXPERIMENTALJeremy Harris
2014-05-12Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2014-05-12Provide better sprintf debug output for callersTodd Lyons
2014-05-12Propagate dnssec status from dnslookup router through transport to tpdaJeremy Harris
2014-05-12Fix pair of buffer size errors. Bug 1478Jeremy Harris
Reported-by: David Binderman
2014-05-11New expansion operator sha256 for certificates. Bug 1170Jeremy Harris
2014-05-11More testcase serializationJeremy Harris
2014-05-11Compiler quietening and testcase consistencyJeremy Harris
Fix an unterminated comment from 018058b
2014-05-09Remove extraneous debugJeremy Harris
2014-05-09Make $tls_out_ocsp visible to TPDA (mostly testsuite)Jeremy Harris
2014-05-08Certificate-related routines only present when TLS is supportedJeremy Harris
2014-05-08Enable operator md5 and sha1 use on certificate variables. Bug 1170Jeremy Harris
2014-05-06OCSP observability: variables $tls_{in,out}_ocspJeremy Harris
and smtp transport option hosts_request_ocsp
2014-05-06Refactor tls_client_init interfaceJeremy Harris
2014-05-05Extractors for subject-alternate-name, ocsp-uri, crl-uri return list. Bug 1358Jeremy Harris
2014-05-04Fix build with OpenSSL on earlier versions.Jeremy Harris
Centos 6.5 and earlier had a build fail with GENERAL_NAME etc. undefined. Just include the file defining it even if it's a duplicate on later versions.
2014-05-03More debug outputJeremy Harris
2014-05-02Certificate variables and field-extractor expansions. Bug 1358Jeremy Harris
2014-05-01Support dnssec in verify-callout use of smtp transport.Jeremy Harris
Use of dnslookup router support is already present.
2014-05-01Cancel in-progress or reject requeted cutthrough when fakereject. Bug 1475Jeremy Harris
2014-04-29Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2014-04-29Bug 1454: Option -oMm for message referenceHeiko Schlichting
Includes docs and test suite
2014-04-27Add options dnssec_request_domains, dnssec_require_domains to the smtp transportJeremy Harris
Note there are no testsuite cases included. TODO in this area: - dnssec during verify-callouts - dnssec on the forward lookup of a verify=helo and verify=reverse_host_lookup
2014-04-24Support OCSP Stapling under GnuTLS. Bug 1459Jeremy Harris
Requires GnuTLS version 3.1.3 or later. Under EXPERIMENTAL_OCSP
2014-04-24Dnssec observability: add variable $lookup_dnssec_authenticatedJeremy Harris
2014-04-24Bug 609: Add -C option to exiqgrepLars Timmann
Option is a passthrough to the exim process that it spawns that generates the queue list. Fixed Conflicts: doc/doc-txt/ChangeLog
2014-04-24dnssec_strict, _lax, _never modifiers for dnsdb lookupsJeremy Harris
Lacking testsuite coverage
2014-04-23Bug 1453: Add SERVERS ldap server list overrideHeiko Schlichting
2014-04-22exiqgrep: add -a to use all recipients (including delivered)mg
2014-04-21Fix testcase "server missing/empty certificate file"Jeremy Harris
GnuTLS early versions (pre 3.0.0 ?) fail to send a reasonable client-cert request when tls_verify_certificates is an empty file. Since the test is for missing *server* certs (tls_certificate) avoid this by pointing to a real (if non-verifying) cert in tls_verify_certificates.
2014-04-21Fix DISABLE_DNSSEC buildJeremy Harris
Bad syntax possibly only affected some compilers.
2014-04-20Add options dnssec_request_domains, dnssec_require_domains to the dnslookup ↵Jeremy Harris
router Note there are no testsuite cases included. TODO in this area: - dnssec during verify-callouts - dnssec during dnsdb expansions - dnssec on the forward lookup of a verify=helo and verify=reverse_host_lookup - observability of status of requested dnssec
2014-04-20Fix handling of $tls_cipher et.al. in (non-verify) transport. Bug 1455Jeremy Harris
The split of these variables into _in and _out sets introduced by d9b231 in 4.82 was incomplete, leaving the deprecated legacy variables nonfunctional during a transport and associated client authenticator. Fix by repointing the legacy set to the outbound connection set at transport startup (and do not clear out the inbound set at this time, either).
2014-04-19Copyright year updates:Todd Lyons
vim $(git whatchanged --since=2014-01-01 | grep '^:100' | sed 's/^[^M]*M//' | sort -u | fgrep -v test/)
2014-04-19Fix Proxy Protocol v2 handlingTodd Lyons
Change recv() to not use MSGPEEK and eliminated flush_input(). Add proxy_target_address/port expansions. Convert ipv6 decoding to memmove(). Use sizeof() for variable sizing. Correct struct member access. Enhance debug output when passed invalid command/family. Add to and enhance documentation. Client script to test Proxy Protocol, interactive on STDIN/STDOUT, so can be chained (ie a swaks pipe), useful for any service, not just Exim and/or smtp.
2014-04-19Fix logging of nomailJeremy Harris
When built with TLS support, non-TLS connections not resulting in mail transfer were crashing while building a log line. Fix by not returning a non-extensible string from the routine added in 67d81c1.
2014-04-15Bail configuration on missing packagePhil Pennock
If we're configured to use pkg-config (or pcre-config) and the tool is not available or does not know about the package we ask for, that should be a fatal configuration error. We should not silently ignore the missing package, then try to compile, and have missing header warnings from the compiler. Eg, if we're told to support GSASL, we'll try to compile the client code, and without compiler flags, we'll either fail to compile (missing headers) or fail to link, which obscures the source of the errors. This change will only break people who had builds set to have Exim depend upon non-existent packages, and that _needs_ to break.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-08 14:46:47 +0000