summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2014-04-15Report OpenSSL build date too.Phil Pennock
Adjust `-d -bV` output for OpenSSL to include library build date. Some OS packagers have backported heartbleed security fixes without changing anything in the reported version number. The closest we can get to a reassuring sign for administrators is to report the OpenSSL library build date, as picked by the library which Exim is using at run time. ``` Library version: OpenSSL: Compile: OpenSSL 1.0.1g 7 Apr 2014 Runtime: OpenSSL 1.0.1g 7 Apr 2014 : built on: Mon Apr 7 15:08:30 PDT 2014 ``` For comparison, the version information for OpenSSL on Ubuntu (where Exim is by default built with GnuTLS, but this provides for context for comparison): ``` $ openssl version -v -b OpenSSL 1.0.1 14 Mar 2012 built on: Mon Apr 7 20:33:29 UTC 2014 ``` GnuTLS: the closest I can find to a runtime value is the call we are already making; if an OS vendor patches GnuTLS without changing the version which would be returned by `gnutls_check_version(NULL)` then the sysadmin is SOL and will have to explore library linkages more carefully.
2014-04-15Make dmarc code c89 compliantTodd Lyons
2014-04-15Add back deprecated SPF error conditionsTodd Lyons
Previous patch introduced a change that could break existing SPF configurations. Add back the two non-standard "err_temp" and "err_perm" result values, with note that it is deprecated and will be removed in a future release.
2014-04-15Add expansion for DMARC policyTodd Lyons
New variable is $dmarc_domain_policy
2014-04-14Update ${utf8clean }. Bug 1401Axel Rau
2014-04-13Fix build for update on library component.Jeremy Harris
When, eg, the smtp transport is changed the transports library must be rebuilt. Fix the main makefile to not assume that the date on the library .a is sufficient, but always call the library subdir makefiles.
2014-04-09More care with headers add/remove lists. Bug 1452Jeremy Harris
As a side-effect, playing games with newlines no longer gives an altered message body/ Testcase 0324 is questionable (though passing)
2014-04-09dnsdb tlsa lookupTodd Lyons
2014-03-26Print support for Experimental Proxy with -bVTodd Lyons
2014-03-23Fix string_unprinting()Jeremy Harris
2014-03-20Future-proof OpenSSL version string. Bug 1421Jeremy Harris
2014-03-19Add tls_verify_hosts and tls_try_verify_hosts to smtp transport, GnuTLS.Wolfgang Breyha
2014-03-18Fix ACL "condition =" for negative number values. Bug 1005Jeremy Harris
Fix conditional "bool{<string>}" for negative number values, to match.
2014-03-16Enforce that only smtp transports can be used for verify callouts. Bug 1445Heiko Schlittermann
2014-03-16Support transport-added headers under cutthrough delivery. Bug 1431Jeremy Harris
2014-03-15Add tls_verify_hosts and tls_try_verify_hosts to smtp transport. Bug 1371Wolfgang Breyha
Code by Wolfgang Breyha, docs and testsuite by Jeremy Harris
2014-03-11Fix DISABLE_DKIM buildJeremy Harris
Reported-by: heiko.schlichting@fu-berlin.de Broken-in: 6e62c454 - jgh146exb@wizmail.org
2014-03-09Refactor malware.c and introduce new scanner type "sock". Bugs 1418 and 1396Jeremy Harris
2014-03-09Log port and TLS details for a failed deliveryJeremy Harris
2014-03-09Log incoming-TLS details on rejects. Bug 305Jeremy Harris
2014-03-08${utf8clean:string} expansion operator. Bug 1401Axel Rau
2014-03-06Change strings of SPF result to conform to RFC 4408Todd Lyons
Introduces a small backwards incompatible change to two results, err_temp to temperror and err_perm to permerror.
2014-03-06Code for verify=header_names_asciiMichael Fischer v. Mollard
Documentation and test included. Fixed Conflicts: doc/doc-txt/ChangeLog
2014-03-05Support log_selector smtp_confirmation for the lmtp transport. Bug 1157Wolfgang Breyha
2014-03-01Fix parallel make. Bug 1446Jeremy Harris
from work by Heiko Schlittermann
2014-02-26Add tls_verify_hosts and tls_try_verify_hosts to smtp transportWolfgang Breyha
Patch version 2
2014-02-09Fix build on systems having ipv6 but lacking an IPV6_TCLASS define (GNU ↵Jeremy Harris
Hurd). Bug 1441 By Samuel Thibault
2014-01-26Fix tls_verify_certificates in gnutls use. Bug 1413.Jeremy Harris
Patch by W.Breyha, tested by H.Schlittermann
2014-01-14Bugzilla 1433: Fix DMARC SEGVWolfgang Breyha
Properly escape value passed to expand_string(). Check for NULL return from expand_string().
2014-01-07Update copyright year in --version outputPhil Pennock
2014-01-07Copyright year updates:Phil Pennock
vi $(git whatchanged --since=2013-01-01 | grep '^:100' | sed 's/^[^M]*M//' | sort -u | fgrep -v test/) Did 2014 first, since otherwise every file I touched to update to 2013 would show as changed in 2014. Last invocation logged to git was during 2012. Will need to be more careful if auditing next year.
2014-01-07Copyright year updates: 2014Phil Pennock
vi $(git whatchanged --since=2014-01-01 | grep '^:100' | sed 's/^[^M]*M//' | sort -u | fgrep -v test/)
2014-01-05Document (and enforce) that DKIM-signing is not supported in cobination with ↵Jeremy Harris
cutthrough routing
2014-01-05Documant the non-support of header manipulation in post-RCPT ACLs in ↵Jeremy Harris
combination with cuttrhough. Add check and paniclog attempts to do so. Bug 1411 (WONTFIX).
2014-01-05Explicitly disable cutthrough on transports having filtersJeremy Harris
2014-01-05Explicitly disable cutthrough on transports having filtersJeremy Harris
2013-12-30Proxy negotiation saves socket timeout values.Todd Lyons
Rename proxy expansions conforming to Exim standards. Update documentation to reflect rename. Seperate restore socket function
2013-12-22Add ${listextract {n}{list}...}Jeremy Harris
2013-12-15Fix use of uninitialized variableJeremy Harris
2013-11-30Proxy Protocol - Server supportTodd Lyons
Initial conf setting and expansions Logging setting whether to record proxy host, off by default Put PROXY processing before connect ACL Fix incoming address logging Add Proxy Protocol to ChangeLog Set window for Proxy Protocol header to be sent Update docs and EDITME.
2013-11-20build: try to get dash/bash for sanityPhil Pennock
The "local" builtin is not part of POSIX. We want it. Try harder to get a vaguely sane shell, rather than just a POSIX shell. Also, safeguard to error out more gracefully if invoked from outside the build process.
2013-11-19Fix ldap option setting.Todd Lyons
Some client libs set a global context, newer client libs set a global default which then needs to be reloaded.
2013-11-12Fix memory management vs acl-as-conditional, reduxJeremy Harris
2013-11-10Fix memory management vs. acl-as-conditionalJeremy Harris
2013-11-10Add commented-braces for ease of brace-matching editor useJeremy Harris
2013-11-08Bug 1334: AutoDetect compression type in exigrepTodd Lyons
Does not use any extra perl modules. Attempts hard coded types first, so no extra code for the standard case. Easy to add more compression types.
2013-11-07Portability fix for Solaris without xpg4 utilitiesTony Finch
2013-11-05Correctly close the server side of TLS when forking for delivery.Tony Finch
2013-10-31Only unbind ldap connection if bind succeededTodd Lyons
2013-10-22Bug 1400: Fix GnuTLS PKCS11 issuesTodd Lyons
Can disable PKCS11 in Makefile with AVOID_GNUTLS_PKCS11 build flag. Rename gnutls_enable_pkcs11 option to gnutls_allow_auto_pkcs11. Update Changelog