Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | DH parameters update, new values & defaultexim-4_88_RC2pdp_new_dhparam | Phil Pennock | 2016-10-08 | 7 | -16/+574 |
| | | | | | | | | | | | | | | | | | | * Add three new Exim-specific DH parameter constants; state provenance, but no way for others to verify; this is a signed commit, which is about as much as we can do for the truly paranoid: provide an audit trail. * Add the RFC 7919 DH primes + No TLS feature negotiation, per 7919, but the DH primes can be used if folks so choose * Fixed broken format string in util/gen_pkcs3.c * Tried to make gen_pkcs3.c support q values. + Turns out, q doesn't affect the PEM and that's not a mistake in my initialisation; I've checked with a cryptographer, we're losing some server-side optimizations but not any security properties for our scenario. Fixes: 1895 | ||||
* | Fix callouts connection fallback from TLS to cleartext. Bug 1897 | Jeremy Harris | 2016-10-08 | 19 | -20/+156 |
| | |||||
* | Docs: add another index entry for delay_warning | Jeremy Harris | 2016-10-05 | 1 | -0/+1 |
| | |||||
* | Testsuite: for CHUNKING set sender name explicitly | Jeremy Harris | 2016-10-04 | 13 | -122/+259 |
| | | | | for consistent chunk size on different platforms | ||||
* | Testsuite: for CHUNKING rewrite sender name in headers to consistent value | Jeremy Harris | 2016-10-03 | 10 | -73/+75 |
| | | | | for consistent chunk size on different test platforms | ||||
* | Close logfile after a while waiting for non-smtp input. Bug 1891 | Jeremy Harris | 2016-10-02 | 3 | -8/+25 |
| | |||||
* | Avoid parsing cost for auto-macro creates | Jeremy Harris | 2016-10-02 | 8 | -113/+109 |
| | |||||
* | Logging: connection_reject log selector should apply also to the connect acl | Jeremy Harris | 2016-10-02 | 16 | -56/+74 |
| | |||||
* | Fix mime ACL filename decode | Jeremy Harris | 2016-09-30 | 1 | -18/+10 |
| | | | | | A latent bug (uninitialised memory referred to by $mime_decoded_filename) uncovered by 40c90bca9f7e | ||||
* | Fix checking for -D option use | Jeremy Harris | 2016-09-29 | 1 | -4/+5 |
| | | | | Broken-by: c0b9d3e87264 | ||||
* | Feature macros should be uppercase | Jeremy Harris | 2016-09-29 | 1 | -1/+1 |
| | |||||
* | Debug: fix openssl tls_close() debug output | Jeremy Harris | 2016-09-29 | 1 | -1/+1 |
| | |||||
* | Testsuite: tidying | Jeremy Harris | 2016-09-29 | 1 | -4/+0 |
| | |||||
* | Refactor driver feature-macro generation to be driven by existing tables | Jeremy Harris | 2016-09-28 | 5 | -64/+15 |
| | | | | Would like to do lookup drivers too but unsure about dyn-linked variants | ||||
* | Default to filesystem space/inode checking enabled | Jeremy Harris | 2016-09-28 | 39 | -18/+178 |
| | |||||
* | Drain socket to get clean TCP FINs | Jeremy Harris | 2016-09-28 | 15 | -88/+117 |
| | |||||
* | Add automatic macros for config-file options. Bug 1819 | Jeremy Harris | 2016-09-25 | 8 | -18/+82 |
| | |||||
* | Docs: fix quotes | Jeremy Harris | 2016-09-25 | 1 | -1/+1 |
| | |||||
* | Delivery: fix memory leak | Jeremy Harris | 2016-09-24 | 1 | -1/+5 |
| | |||||
* | Doc: add clarification for DKIM exampleexim-4_88_RC1 | Jeremy Harris | 2016-09-23 | 1 | -2/+7 |
| | |||||
* | Defend against symlink attack by another process running as exim | Jeremy Harris | 2016-09-22 | 6 | -77/+152 |
| | | | | | Reported-by: http://www.halfdog.net/Security/2016/DebianEximSpoolLocalRoot/ | ||||
* | Routing: avoid doing the one_time replacement operation when a redirect ↵ | Jeremy Harris | 2016-09-22 | 3 | -26/+23 |
| | | | | | | leaves the address unchanged When done, in combination with a defer the retry would see the address as delivered, hence losing mail. | ||||
* | Routing: for efficiency, avoid complexifying the "condition" string until ↵ | Jeremy Harris | 2016-09-22 | 6 | -29/+27 |
| | | | | the second is read from config | ||||
* | ACL: merge the tables used for codition/modifier decode | Jeremy Harris | 2016-09-18 | 3 | -382/+243 |
| | |||||
* | ACL: bsearch for controls | Jeremy Harris | 2016-09-18 | 4 | -235/+192 |
| | |||||
* | tidying | Jeremy Harris | 2016-09-17 | 20 | -160/+163 |
| | |||||
* | Docs: mention Perl manpages for PCRE. Bug 1881 | Jeremy Harris | 2016-09-15 | 1 | -1/+5 |
| | |||||
* | Logging: fix errno decodes | Jeremy Harris | 2016-09-14 | 2 | -5/+5 |
| | |||||
* | Auth: fix error check in CRAM-MD5 | Jeremy Harris | 2016-09-13 | 1 | -7/+6 |
| | |||||
* | tidying | Jeremy Harris | 2016-09-13 | 12 | -121/+81 |
| | |||||
* | Log EHLO response on getting conn-close response for HELO. Bug 1832 | Jeremy Harris | 2016-09-11 | 6 | -4/+60 |
| | |||||
* | Reduce space used by flags in smtp transport | Jeremy Harris | 2016-09-11 | 2 | -128/+152 |
| | |||||
* | Make BOOL unsigned; fix resulting latent bugs | Jeremy Harris | 2016-09-11 | 6 | -7/+7 |
| | |||||
* | Cutthrough: option to reflect 4xx errors from target to initiator | Jeremy Harris | 2016-09-05 | 14 | -76/+686 |
| | |||||
* | Testsuite: missing output file | Jeremy Harris | 2016-09-04 | 1 | -0/+3 |
| | |||||
* | Docs: prettify code examples. Bug 1284 | Jeremy Harris | 2016-09-03 | 1 | -3/+3 |
| | |||||
* | Docs: add note on strict DKIM verification | Jeremy Harris | 2016-09-03 | 1 | -3/+27 |
| | |||||
* | Testsuite: fix GnuTLS OCSP testing | Jeremy Harris | 2016-09-01 | 7 | -23/+25 |
| | |||||
* | Support "G" multiplier on integer configuration values | Jeremy Harris | 2016-09-01 | 5 | -16/+31 |
| | |||||
* | Testsuite: fix spool-space testcase for larger disks | Jeremy Harris | 2016-09-01 | 1 | -1/+2 |
| | |||||
* | Tidying: coverity issues | Jeremy Harris | 2016-09-01 | 2 | -4/+5 |
| | |||||
* | CHUNKING: after rejecting a pipelined SMTP command, flush any followon BDAT data | Jeremy Harris | 2016-09-01 | 4 | -0/+79 |
| | |||||
* | Add automatic macros for compile-time feature options | Jeremy Harris | 2016-08-22 | 26 | -52/+294 |
| | |||||
* | Testsuite: fix macro conflict (X vs. HEADERS_MAXSIZE) | Jeremy Harris | 2016-08-22 | 3 | -8/+8 |
| | |||||
* | tidying | Jeremy Harris | 2016-08-21 | 2 | -184/+168 |
| | |||||
* | Expansions: more debug verbosity in expansion conditions | Jeremy Harris | 2016-08-20 | 1 | -0/+2 |
| | |||||
* | Tidying: coverity issues | Jeremy Harris | 2016-08-20 | 6 | -55/+100 |
| | |||||
* | Testsuite: rework timing of time-dependent testcase | Jeremy Harris | 2016-08-19 | 2 | -22/+5 |
| | |||||
* | Delivery: fix transmission down an already-open connection, when | Jeremy Harris | 2016-08-18 | 2 | -2/+12 |
| | | | | | | one of the group of addresses is unsuitable for it. Bug 1874 Broken-by: 3070ceeeed05, fa41615da702. | ||||
* | Delivery: same-host checking for transport runs should include port from ↵ | Jeremy Harris | 2016-08-17 | 2 | -0/+8 |
| | | | | address give by routing |