TFO: change the default for hosts_try_fastopen, enabling use by default

diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index 856bb0c15756ecc8516effb496a9461eb446eaa5..bfacdef81e69f5e311acdc2249bc12d05c3aba0d 100644 (file)
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -24706,7 +24706,7 @@ a DANE-verified TLS connection is made to that host;
 there will be no fallback to in-clear communication.
 See section &<<SECDANE>>&.
 
 there will be no fallback to in-clear communication.
 See section &<<SECDANE>>&.
 

-.option hosts_try_fastopen smtp "host list&!!" unset
+.option hosts_try_fastopen smtp "host list&!!" *

 .cindex "fast open, TCP" "enabling, in client"
 .cindex "TCP Fast Open" "enabling, in client"
 .cindex "RFC 7413" "TCP Fast Open"
 .cindex "fast open, TCP" "enabling, in client"
 .cindex "TCP Fast Open" "enabling, in client"
 .cindex "RFC 7413" "TCP Fast Open"

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 9ee8c22df655117037a659e3b7ab890bd462ffd2..62801740b39bfc0e45409bd6ce9bf52c227952f2 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -120,6 +120,10 @@ JH/23 The build default is now for TLS to be included; the SUPPORT_TLS define
 JH/24 Fix duplicated logging of peer name/address, on a transport connection-
       reject under TFO.
 
 JH/24 Fix duplicated logging of peer name/address, on a transport connection-
       reject under TFO.
 

+JH/25 The smtp transport option "hosts_try_fastopen" now enables all hosts by
+      default.  If the platfor supports and has the facility enabled, it will
+      be requested on all coneections.
+

 
 Exim version 4.92
 -----------------
 
 Exim version 4.92
 -----------------

diff --git a/src/src/transports/smtp.c b/src/src/transports/smtp.c
index 94c1fe40cc7b0e8f26fa2062d520d1c3c6c43b9d..3ed2166ce591a1544b5f35f59f741473964e90ee 100644 (file)
--- a/src/src/transports/smtp.c
+++ b/src/src/transports/smtp.c
@@ -244,7 +244,7 @@ smtp_transport_options_block smtp_transport_option_defaults = {
   .hosts_require_dane =                NULL,
   .dane_require_tls_ciphers =  NULL,
 #endif
   .hosts_require_dane =                NULL,
   .dane_require_tls_ciphers =  NULL,
 #endif

-  .hosts_try_fastopen =                NULL,
+  .hosts_try_fastopen =                US"*",

 #ifndef DISABLE_PRDR
   .hosts_try_prdr =            US"*",
 #endif
 #ifndef DISABLE_PRDR
   .hosts_try_prdr =            US"*",
 #endif

diff --git a/test/stdout/0572 b/test/stdout/0572
index 0ea38119065164dd058459bf008aa43b118807da..1d37a81954a044c4c8339d70924961a59c293f59 100644 (file)
--- a/test/stdout/0572
+++ b/test/stdout/0572
@@ -58,7 +58,7 @@ no_hosts_randomize
 hosts_require_auth = 
 hosts_try_auth = 
 hosts_try_chunking = *
 hosts_require_auth = 
 hosts_try_auth = 
 hosts_try_chunking = *

-hosts_try_fastopen = 
+hosts_try_fastopen = *

 hosts_try_prdr = *
 interface = ip4.ip4.ip4.ip4
 keepalive
 hosts_try_prdr = *
 interface = ip4.ip4.ip4.ip4
 keepalive