summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* DH parameters update, new values & defaultexim-4_88_RC2pdp_new_dhparamPhil Pennock2016-10-087-16/+574
| | | | | | | | | | | | | | | | | | * Add three new Exim-specific DH parameter constants; state provenance, but no way for others to verify; this is a signed commit, which is about as much as we can do for the truly paranoid: provide an audit trail. * Add the RFC 7919 DH primes + No TLS feature negotiation, per 7919, but the DH primes can be used if folks so choose * Fixed broken format string in util/gen_pkcs3.c * Tried to make gen_pkcs3.c support q values. + Turns out, q doesn't affect the PEM and that's not a mistake in my initialisation; I've checked with a cryptographer, we're losing some server-side optimizations but not any security properties for our scenario. Fixes: 1895
* Fix callouts connection fallback from TLS to cleartext. Bug 1897Jeremy Harris2016-10-0819-20/+156
|
* Docs: add another index entry for delay_warningJeremy Harris2016-10-051-0/+1
|
* Testsuite: for CHUNKING set sender name explicitlyJeremy Harris2016-10-0413-122/+259
| | | | for consistent chunk size on different platforms
* Testsuite: for CHUNKING rewrite sender name in headers to consistent valueJeremy Harris2016-10-0310-73/+75
| | | | for consistent chunk size on different test platforms
* Close logfile after a while waiting for non-smtp input. Bug 1891Jeremy Harris2016-10-023-8/+25
|
* Avoid parsing cost for auto-macro createsJeremy Harris2016-10-028-113/+109
|
* Logging: connection_reject log selector should apply also to the connect aclJeremy Harris2016-10-0216-56/+74
|
* Fix mime ACL filename decodeJeremy Harris2016-09-301-18/+10
| | | | | A latent bug (uninitialised memory referred to by $mime_decoded_filename) uncovered by 40c90bca9f7e
* Fix checking for -D option useJeremy Harris2016-09-291-4/+5
| | | | Broken-by: c0b9d3e87264
* Feature macros should be uppercaseJeremy Harris2016-09-291-1/+1
|
* Debug: fix openssl tls_close() debug outputJeremy Harris2016-09-291-1/+1
|
* Testsuite: tidyingJeremy Harris2016-09-291-4/+0
|
* Refactor driver feature-macro generation to be driven by existing tablesJeremy Harris2016-09-285-64/+15
| | | | Would like to do lookup drivers too but unsure about dyn-linked variants
* Default to filesystem space/inode checking enabledJeremy Harris2016-09-2839-18/+178
|
* Drain socket to get clean TCP FINsJeremy Harris2016-09-2815-88/+117
|
* Add automatic macros for config-file options. Bug 1819Jeremy Harris2016-09-258-18/+82
|
* Docs: fix quotesJeremy Harris2016-09-251-1/+1
|
* Delivery: fix memory leakJeremy Harris2016-09-241-1/+5
|
* Doc: add clarification for DKIM exampleexim-4_88_RC1Jeremy Harris2016-09-231-2/+7
|
* Defend against symlink attack by another process running as eximJeremy Harris2016-09-226-77/+152
| | | | | Reported-by: http://www.halfdog.net/Security/2016/DebianEximSpoolLocalRoot/
* Routing: avoid doing the one_time replacement operation when a redirect ↵Jeremy Harris2016-09-223-26/+23
| | | | | | leaves the address unchanged When done, in combination with a defer the retry would see the address as delivered, hence losing mail.
* Routing: for efficiency, avoid complexifying the "condition" string until ↵Jeremy Harris2016-09-226-29/+27
| | | | the second is read from config
* ACL: merge the tables used for codition/modifier decodeJeremy Harris2016-09-183-382/+243
|
* ACL: bsearch for controlsJeremy Harris2016-09-184-235/+192
|
* tidyingJeremy Harris2016-09-1720-160/+163
|
* Docs: mention Perl manpages for PCRE. Bug 1881Jeremy Harris2016-09-151-1/+5
|
* Logging: fix errno decodesJeremy Harris2016-09-142-5/+5
|
* Auth: fix error check in CRAM-MD5Jeremy Harris2016-09-131-7/+6
|
* tidyingJeremy Harris2016-09-1312-121/+81
|
* Log EHLO response on getting conn-close response for HELO. Bug 1832Jeremy Harris2016-09-116-4/+60
|
* Reduce space used by flags in smtp transportJeremy Harris2016-09-112-128/+152
|
* Make BOOL unsigned; fix resulting latent bugsJeremy Harris2016-09-116-7/+7
|
* Cutthrough: option to reflect 4xx errors from target to initiatorJeremy Harris2016-09-0514-76/+686
|
* Testsuite: missing output fileJeremy Harris2016-09-041-0/+3
|
* Docs: prettify code examples. Bug 1284Jeremy Harris2016-09-031-3/+3
|
* Docs: add note on strict DKIM verificationJeremy Harris2016-09-031-3/+27
|
* Testsuite: fix GnuTLS OCSP testingJeremy Harris2016-09-017-23/+25
|
* Support "G" multiplier on integer configuration valuesJeremy Harris2016-09-015-16/+31
|
* Testsuite: fix spool-space testcase for larger disksJeremy Harris2016-09-011-1/+2
|
* Tidying: coverity issuesJeremy Harris2016-09-012-4/+5
|
* CHUNKING: after rejecting a pipelined SMTP command, flush any followon BDAT dataJeremy Harris2016-09-014-0/+79
|
* Add automatic macros for compile-time feature optionsJeremy Harris2016-08-2226-52/+294
|
* Testsuite: fix macro conflict (X vs. HEADERS_MAXSIZE)Jeremy Harris2016-08-223-8/+8
|
* tidyingJeremy Harris2016-08-212-184/+168
|
* Expansions: more debug verbosity in expansion conditionsJeremy Harris2016-08-201-0/+2
|
* Tidying: coverity issuesJeremy Harris2016-08-206-55/+100
|
* Testsuite: rework timing of time-dependent testcaseJeremy Harris2016-08-192-22/+5
|
* Delivery: fix transmission down an already-open connection, whenJeremy Harris2016-08-182-2/+12
| | | | | | one of the group of addresses is unsuitable for it. Bug 1874 Broken-by: 3070ceeeed05, fa41615da702.
* Delivery: same-host checking for transport runs should include port from ↵Jeremy Harris2016-08-172-0/+8
| | | | address give by routing