Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-11-08 | Testsuite: 2091,5403 independent of calling user | Jeremy Harris | |
2016-10-22 | Testsuite: Add testcase for GnuTLS disconnect after STARTTLS | Jeremy Harris | |
2016-10-22 | TCP Fast Open | Jeremy Harris | |
2016-10-08 | Fix callouts connection fallback from TLS to cleartext. Bug 1897 | Jeremy Harris | |
2016-09-28 | Drain socket to get clean TCP FINs | Jeremy Harris | |
2016-08-22 | Add automatic macros for compile-time feature options | Jeremy Harris | |
2016-08-09 | Testsuite: nail down hostname for CHUNKING test cases | Jeremy Harris | |
2016-08-02 | testcases for TLS | Jeremy Harris | |
2016-06-02 | Expansions: add ${sha3:<string>} item | Jeremy Harris | |
2016-06-02 | Add support for ${sha256:<string>} | Jeremy Harris | |
2016-05-21 | Testsuite: GnuTLS server TLD startup errors testcase | Jeremy Harris | |
2016-05-04 | TLS: when tls_certificates unset, generate a selfsigned cert | Jeremy Harris | |
2015-03-15 | SOCKS: as a client, talk SMTP via a socks5 proxy. Bug 1590 | Jeremy Harris | |
2015-01-20 | Testsuite: Experimental_Certnames absorbed into mainline | Jeremy Harris | |
2015-01-12 | Move certificate name checking to mainline, default enabled | Jeremy Harris | |
This is an exim client checking a server certificate. | |||
2014-10-16 | Handle certificate dir under GnuTLS, if recent enough | Jeremy Harris | |
Add testcases for certificate directories The GnuTLS implementation has been tested on Fedora 21 (alpha), using GnuTLS 3.3.9. The testsuite case is here but with the script commented-out. When enabled, the log/mail/stdout/stderr files will be created fresh. | |||
2014-07-13 | Fix TLS SNI, and add regression test cases | Jeremy Harris | |
2014-05-02 | Certificate variables and field-extractor expansions. Bug 1358 | Jeremy Harris | |
2014-04-20 | Make testcase more robust vs. timing variations | Jeremy Harris | |
by restricting operations and logging to fewer items of interest | |||
2014-03-19 | Add tls_verify_hosts and tls_try_verify_hosts to smtp transport, GnuTLS. | Wolfgang Breyha | |
2013-01-26 | PRDR support, if compiled with EXPERIMENTAL_PRDR | Jeremy Harris | |
2012-06-05 | Testsuite: add per-testcase munge facility; use for dnssec and gnutls. | Jeremy Harris | |
2012-05-17 | CRL addition returns count of CRLs added | Phil Pennock | |
A couple more cert1/2 strings updated, plus some disambiguating rhubarb. | |||
2012-05-16 | Overhaul of GnuTLS code. | Phil Pennock | |
GnuTLS code re-done, using cut&paste for preservation where appropriate. Stop using deprecated APIs. Stop hard-coding lists of ciphers. Use gnutls_priority_init() instead. Turns tls_require_ciphers into a string in the GnuTLS case, not just OpenSSL case. Deprecate three gnutls_require_* options; now ignored but not errors. (No warnings yet). Added TLS SNI support. Made the channel binding integration theoretically actually work. I had it guarded by an #ifdef but the value used was an enum instead. Oops. Fixed. New code much more amenable to future work permitting TLS in callouts. DH param sizes now chosen by GnuTLS maintainers, we use "normal"; that's suddenly a lot more bits, so the saved filename was changed too. (GNUTLS_SEC_PARAM_NORMAL). DH param setup only done for servers now, since clients don't need/use it. GnuTLS a lot more robust to library negotiation using stuff we don't support, error-ing out quickly for other authentication systems (PGP, etc). Renamed pseudo_random_number() to vaguely_random_number() which makes the nature clearer. GnuTLS now provides a vaguely_random_number() implementation, to match OpenSSL. Pull in <inttypes.h> to make the recent arithmetic changes compile on MacOS. Nuke test 2011 which related to the gnutls_require_* options now non-functional. | |||
2012-05-07 | Testsuite: updates for 8bitmime-as-default. | Jeremy Harris | |
2007-04-16 | Fix bug in previous patch: following data is permitted after '.' so it | Philip Hazel | |
must not be diagnosed as an error. The check for vanished socket can only be applied when there is no data pending. | |||
2007-04-13 | Check for lost connection or unexpected input at end of message. | Philip Hazel | |
2007-01-30 | Magnus' patch for $sending_ip_address and $sending_port. | Philip Hazel | |
2007-01-18 | Add gnutls_require_{kx,mac,protocols}. | Philip Hazel | |
2006-10-18 | Fix tls_required and lost_connection retry testss not working. | Philip Hazel | |
2006-10-16 | Florian Weimer's patch to remove the unwanted and unused support for | Philip Hazel | |
RSA_EXPORT from the GnuTLS code. | |||
2006-03-09 | Add new errors mail_4xx, data_4xx, lost_connection, tls_required. | Philip Hazel | |
2006-02-07 | Hopefully the final lot of test files. | Philip Hazel | |