summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2017-01-24Fix reception of (quoted) local-parts with embedded spaces. Bug 2025Jeremy Harris
2017-01-24TFO: Support compilation on Linus platforms which define TCP_FASTOPEN but ↵Jeremy Harris
not MSG_FASTOPEN
2017-01-24Define MIN and MAX for SolarisJeremy Harris
2017-01-23Fix build with OpenSSL, EXPERIMENTAL_DANE and DISABLE_EVENTJeremy Harris
2017-01-22DKIM: permit verify of sig blocks that sign other sig blocks. Bug 2014Jeremy Harris
2017-01-21Fix DKIM verify when used with CHUNKING. Bug 2016Jeremy Harris
2017-01-21Testcases for pipelined calloutJeremy Harris
2017-01-21Use smtp_write_mail_and_rcpt_cmds() for verify calloutJeremy Harris
2017-01-21use smtp_context struct for sync_responses()Jeremy Harris
2017-01-21Split out smtp_write_mail_and_rcpt_cmds() from smtp_deliver()Jeremy Harris
2017-01-21Split out cutthrough connection-cache / subsequent-rcpt handling, from ↵Jeremy Harris
do_callout()
2017-01-21Split out callout-cache handling from do_callout()Jeremy Harris
2017-01-21Use smtp_setup_conn() for verify calloutJeremy Harris
2017-01-21Split out smtp MAIL and RCPT option string buildingJeremy Harris
2017-01-21Split out smtp_setup_conn() from smtp_deliver, in the transportJeremy Harris
2017-01-21Fix DKIM verify operation in -bh test mode. Bug 2017Jeremy Harris
2017-01-19VRFY: advertise in EHLO response, if there is an ACL definedJeremy Harris
2017-01-19VRFY: add docs note on results, and additional test casesJeremy Harris
2017-01-18spelling: MavrogiannopoulosJosh Soref
Committer note: the name was spelt as was used by Nikos at the time, but he's since switched to the other latinization form and is using it everywhere these days. Part of his response was "Feel free to use the Mavrogiannopoulos variant everywhere.", so I'm merging this commit too.
2017-01-18replace keept with rotationJosh Soref
Log rotate documentation does not actually give a term for this portion of a filename, but to the extent that I can find a term, a number of places call it a "rotation number". Replacing keept which is inaccurate and misleading with rotation makes the code a little easier to read.
2017-01-18Bug-fix no_require_dnssec parsing & spelling fixesJosh Soref
Patches from Josh Soref fixing spelling fixed two bugs: * Parsing `no_require_dnssec` configuration option * Setting `_HAVE_TRANSPORT_APPEND_MAILDIR` macro (for config parsing) [ PP pulled these two out into a separate commit to update the ChangeLog accordingly. ]
2017-01-18214 spelling fixesJosh Soref
2017-01-12Provide alternative Heimdal pkg-config examplePhil Pennock
Building Exim against Heimdal 1.5, heimdal-gssapi.pc was needed. There's been a major version bump in Heimdal, and against 7.1 that doesn't work; using heimdal-krb5.pc fails on missing `gss_*` functions. I can find no build documentation for Heimdal which describes what should be needed. heimdal-gssapi.pc does reference heimdal-krb5.pc in `Requires.private` but it's not being used by FreeBSD pkgconf in such a way that it's available when building on FreeBSD 10.3. Fortunately, our `*_PC` logic works with multiple packages listed, so provide that example.
2017-01-03CHUNKING: fix non-pipelined synch checks. Bug 2004Jeremy Harris
2017-01-02PROXY: fix v2 protocol decode. Bugs 2003, 1747Jeremy Harris
2017-01-02wip: OpenSSL docs on custom installPhil Pennock
To fix before merge: ability to use `$ORIGIN` in linker line via Exim config file.
2016-12-31Merge remote-tracking branch 'github/pr/50'Phil Pennock
GitHub user @YmrDtnJu "Björn" provided a patch to fix that we called ldap_start_tls_s on ldapi:// connections. This is obviously a correct change, since above we've avoiding initializing the TLS state if using ldapi. Added documentation noting this behaviour.
2016-12-31DKIM: Under debug, when signing do an extra check on the dns record that will beJeremy Harris
used for verification. Bug 1926
2016-12-31Do not call ldap_start_tls_s on ldapi:// connections.YmrDtnJu
The code already skips the initialisation of TLS on LDAP connections over unix sockets but the call to ldap_start_tls_s is done nonetheless.
2016-12-30Tidy and add \0 after string_append() for relative .includesHeiko Schlittermann (HS12-RIPE)
2016-12-29tidyingJeremy Harris
2016-12-29I18N: avoid trying to downconvert all-ascii domain names.Jeremy Harris
With the IDNA-2008 handling downconversion results in lowercasing; so avoid doing that if possible.
2016-12-29Allow relative file names in .include lines (Closes 1971)Heiko Schlittermann (HS12-RIPE)
2016-12-29Constify config_filenameHeiko Schlittermann (HS12-RIPE)
2016-12-29DKIM: More validation of DNS key record. Bug 1926Jeremy Harris
2016-12-29OpenSSL: add detail to certname verify fail log lineJeremy Harris
2016-12-29Pipe transport: expand the path optionJeremy Harris
2016-12-26I18N: support IDNA2008. Bug 1911Jeremy Harris
2016-12-18Fix DKIM information leakageJeremy Harris
2016-12-13Use long names for the _DRIVER_*, and _OPT_* macrosHeiko Schlittermann (HS12-RIPE)
2016-12-04OpenSSL: default to tls_eccurve = autoHeiko Schlittermann (HS12-RIPE)
For OpenSSL < 1.0.2: fallback to prime256v1, for newer libraries rely on auto-selection.
2016-12-03Build: disable OCSP, AUTH_TLS and EXPERIMENTAL_CERTNAMES if SUPPORT_TLS is ↵Jeremy Harris
not enabled
2016-11-23Fix memory leak on (Gnu)TLS close.Heiko Schlittermann (HS12-RIPE)
This leak doesn't show up under normal operation, as the process normally dies right after closing the session. But during callout repetitive TLS sessions are opened and closed from the same process (the process receiving the message). Depending on the amount of RAM and the number of callouts the same process does, this may be a problem. (On an amd64 machine with 4GB RAM, at about 1000 recipients the memory is exhausted.)
2016-11-23Fix crash in (Gnu)TLS debug outputHeiko Schlittermann (HS12-RIPE)
2016-11-15Callout: wait for response to QUIT before closingJeremy Harris
2016-11-13Tidying: coverity issuesJeremy Harris
2016-11-12DANE: Bitrot: Port to OpenSSL >= 1.1.0Jeremy Harris
2016-11-12OpenSSL 1.1 - STORE_CTX accessor functionsJeremy Harris
2016-11-12OpenSSL 1.1 - rework OCSP proof verification at load time in serverJeremy Harris
2016-11-08Ensure socket is nonblocking before draining. Bug 1914Jeremy Harris