| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
Originally by Dominic Benson <dominic@lenny.cus.org>
Rebased for current malware.c by JGH.
Testing by Heiko Schlittermann <hs@schlittermann.de>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This is an exim client checking a server certificate.
|
|
|
|
|
|
This is an exim client checking a server certificate.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Fix certificate name verification done with tls_try_verify_hosts
Affected tls_verify_hosts, tls_try_verify_hosts, tls_verify_cert_hostnames.
|
|
connected-to, not be list of acceptable names. The name checked is the
host name.
|
|
EXPERIMENTAL_CERTNAMES)
|
|
|
|
|
|
|
|
|
|
the string resulting from the event expansion
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Note this may affect utilities which parse logs.
|
|
Add testcases for certificate directories
The GnuTLS implementation has been tested on Fedora 21 (alpha),
using GnuTLS 3.3.9. The testsuite case is here but with the
script commented-out. When enabled, the log/mail/stdout/stderr
files will be created fresh.
|
|
|
|
As usual, gcc whining that perfectly valid C coding is
"ambiguous". Wrongly.
|
|
|
|
|
|
The previous parsing failed when a result item split over a buffer boundary;
fix by prefixing sizes to items, and checking enough has been read as the
initial parsing stage.
|
|
|
|
|
|
|
|
|
|
Also, just ignore TLSA records with unsipported match types.
|
|
usage 3 and with require_ocsp in play though inactive
|
