2016-05-04 |
Jeremy Harris | TLS: when tls_certificates unset, generate a selfsigned... |
blob | commitdiff | raw |
2016-04-21 |
Jeremy Harris | DANE: treat "no action taken" response from library... |
blob | commitdiff | raw | diff to current |
2016-04-06 |
Renaud Allard | TLS: Fix ECDH use under LibreSSL. Bug 1806 |
blob | commitdiff | raw | diff to current |
2016-04-02 |
Jeremy Harris | Copyright year updates (things touched in 2016) |
blob | commitdiff | raw | diff to current |
2016-03-06 |
Jeremy Harris | tidying: coverity issues |
blob | commitdiff | raw | diff to current |
2016-03-03 |
Jeremy Harris | tidying |
blob | commitdiff | raw | diff to current |
2016-03-02 |
Heiko Schlitterman... | Merge branch 'master' |
blob | commitdiff | raw | diff to current |
2016-02-18 |
Heiko Schlitterman... | Fix CVE-2016-1531 exim-4_87_RC4 |
blob | commitdiff | raw | diff to current |
2016-02-10 |
Jeremy Harris | TLS: support build with OpenSSL 1.1.0 Bug 1771 |
blob | commitdiff | raw | diff to current |
2016-02-05 |
Jeremy Harris | TLS: Whine to log on client config of SNI under too... |
blob | commitdiff | raw | diff to current |
2016-01-17 |
Jeremy Harris | Tidying |
blob | commitdiff | raw | diff to current |
2016-01-14 |
Jeremy Harris | OpenSSL: Default the SINGLE_DH_USE option flag set |
blob | commitdiff | raw | diff to current |
2015-12-28 |
Jeremy Harris | tidying |
blob | commitdiff | raw | diff to current |
2015-12-23 |
Jeremy Harris | tidying |
blob | commitdiff | raw | diff to current |
2015-12-17 |
Jeremy Harris | DANE: do not override a cert verify failure, in callbac... |
blob | commitdiff | raw | diff to current |
2015-12-16 |
Viktor Dukhovni | DANE: current src version |
blob | commitdiff | raw | diff to current |
2015-12-14 |
Jeremy Harris | Events: move from Experimental to mainline |
blob | commitdiff | raw | diff to current |
2015-12-09 |
Jeremy Harris | I18N: Move EAI support from Experimental to mainline exim-4_87_RC1 |
blob | commitdiff | raw | diff to current |
2015-11-01 |
Heiko Schlitterman... | Source: Remove trailing whitespaces from src/*.{h,c} |
blob | commitdiff | raw | diff to current |
2015-08-14 |
Tony Finch | Overhaul the debug_selector and log_selector machinery... |
blob | commitdiff | raw | diff to current |
2015-08-06 |
Jeremy Harris | OpenSSL: fix complile on pre-EC-capable library versions |
blob | commitdiff | raw | diff to current |
2015-07-26 |
Jeremy Harris | Compiler quietening |
blob | commitdiff | raw | diff to current |
2015-06-14 |
Jeremy Harris | Add tls_eccurve main config option. Bug 1397 |
blob | commitdiff | raw | diff to current |
2015-06-05 |
Phil Pennock | Copyright year updates (things touched in 2015) |
blob | commitdiff | raw | diff to current |
2015-06-04 |
Jeremy Harris | TLS authenticator |
blob | commitdiff | raw | diff to current |
2015-05-29 |
Phil Pennock | OpenSSL: guard X509_check_host against LibreSSL |
blob | commitdiff | raw | diff to current |
2015-05-26 |
Phil Pennock | TLS: Enable ECDHE on OpenSSL, just the NIST P-256 curve... |
blob | commitdiff | raw | diff to current |
2015-05-16 |
Jeremy Harris | tidying |
blob | commitdiff | raw | diff to current |
2015-04-22 |
Jeremy Harris | UTF8: Cert namechecks always use a-label |
blob | commitdiff | raw | diff to current |
2015-03-25 |
Jeremy Harris | Fix recent-openssl compile |
blob | commitdiff | raw | diff to current |
2015-02-14 |
Jeremy Harris | OpenSSL: Capture peercert/dn in mainline not verify... |
blob | commitdiff | raw | diff to current |
2015-02-09 |
Jeremy Harris | tidying |
blob | commitdiff | raw | diff to current |
2015-02-04 |
Jeremy Harris | Openssl: add peer IP to cert verify log lines |
blob | commitdiff | raw | diff to current |
2015-02-01 |
Jeremy Harris | constification |
blob | commitdiff | raw | diff to current |
2015-01-21 |
Jeremy Harris | DANE: if all TLSA records are unusable, retry verificat... |
blob | commitdiff | raw | diff to current |
2015-01-12 |
Jeremy Harris | Make smtp transport try server cert verify by default |
blob | commitdiff | raw | diff to current |
2015-01-12 |
Jeremy Harris | Support use of system default CA bundle |
blob | commitdiff | raw | diff to current |
2015-01-12 |
Jeremy Harris | Move certificate name checking to mainline, default... |
blob | commitdiff | raw | diff to current |
2015-01-12 |
Jeremy Harris | Refactor common uses of list-checking |
blob | commitdiff | raw | diff to current |
2014-12-04 |
Jeremy Harris | Fail a DANE-mode verify on totally missing certificate |
blob | commitdiff | raw | diff to current |
2014-11-20 |
Jeremy Harris | Const-ification |
blob | commitdiff | raw | diff to current |
2014-11-08 |
Jeremy Harris | Fix smtp transport certificate-verification option... |
blob | commitdiff | raw | diff to current |
2014-11-06 |
Jeremy Harris | EXPERIMENTAL_CERTNAMES: Hostlist for cert name checks... |
blob | commitdiff | raw | diff to current |
2014-11-05 |
Jeremy Harris | Do not permit multi-component wildcards on certificate... |
blob | commitdiff | raw | diff to current |
2014-11-05 |
Jeremy Harris | Do not permit multi-component wildcards on certificate... |
blob | commitdiff | raw | diff to current |
2014-10-30 |
Jeremy Harris | Fix cert-try-verify when denied by event action |
blob | commitdiff | raw | diff to current |
2014-10-30 |
Jeremy Harris | For connects and certificate-verifies denied by event... |
blob | commitdiff | raw | diff to current |
2014-10-26 |
Jeremy Harris | Fix cert-try-verify when denied by event action |
blob | commitdiff | raw | diff to current |
2014-10-26 |
Jeremy Harris | Fix feature-ifdef for OpenSSL builtin certname checking |
blob | commitdiff | raw | diff to current |
2014-10-25 |
Jeremy Harris | Add event for inbound cert visibility |
blob | commitdiff | raw | diff to current |
2014-10-25 |
Jeremy Harris | Rename facility to Event Actions, ifdeffed on EXPERIMEN... |
blob | commitdiff | raw | diff to current |
2014-10-22 |
Todd Lyons | Merge branch 'master' of ssh://git.exim.org/home/git... |
blob | commitdiff | raw | diff to current |
2014-10-22 |
Jeremy Harris | More regular logging use of H=<name> [<ip>] |
blob | commitdiff | raw | diff to current |
2014-09-25 |
Jeremy Harris | Amplify comment on server requests for client certificates |
blob | commitdiff | raw | diff to current |
2014-09-23 |
Todd Lyons | Merge remote-tracking branch 'exim_github/pr/18' |
blob | commitdiff | raw | diff to current |
2014-09-13 |
Jeremy Harris | Restrict dane to DANE-TA(2) and DANE-EE(3) usage TLSA... |
blob | commitdiff | raw | diff to current |
2014-09-12 |
Jeremy Harris | Fix needless OCSP request under DANE |
blob | commitdiff | raw | diff to current |
2014-09-11 |
Jeremy Harris | Add debug for number of CA certs, for OpenSSL/file... |
blob | commitdiff | raw | diff to current |
2014-09-10 |
Jeremy Harris | TPDA tidying |
blob | commitdiff | raw | diff to current |
2014-09-06 |
Todd Lyons | Merge branch 'master_condition_description' |
blob | commitdiff | raw | diff to current |
2014-09-04 |
Jeremy Harris | Enforce TLS under DANE when host has TLSA records |
blob | commitdiff | raw | diff to current |
2014-09-02 |
Jeremy Harris | Introduce EXPERIMENTAL_DANE feature |
blob | commitdiff | raw | diff to current |
2014-08-20 |
Jeremy Harris | Merge branch dane-tpda into dane |
blob | commitdiff | raw | diff to current |
2014-08-20 |
Jeremy Harris | Merge branch 'master' into dane |
blob | commitdiff | raw | diff to current |
2014-08-20 |
Jeremy Harris | Expanded EXPERIMENTAL_TPDA feature |
blob | commitdiff | raw | diff to current |
2014-08-17 |
Jeremy Harris | Override an unchanged default hosts_request_ocsp when... |
blob | commitdiff | raw | diff to current |
2014-08-17 |
Jeremy Harris | Feature compile-guard |
blob | commitdiff | raw | diff to current |
2014-08-16 |
Jeremy Harris | Add observability variables and provision for avoiding... |
blob | commitdiff | raw | diff to current |
2014-08-16 |
Jeremy Harris | Break out dane code to separate functions |
blob | commitdiff | raw | diff to current |
2014-08-15 |
Jeremy Harris | Compiler quietening |
blob | commitdiff | raw | diff to current |
2014-08-14 |
Jeremy Harris | Fix fakens TLSA generation and DANE TLSA lookup |
blob | commitdiff | raw | diff to current |
2014-08-11 |
Jeremy Harris | Do not sleep for tiny periods, or hang trying to sleep... |
blob | commitdiff | raw | diff to current |
2014-08-11 |
Jeremy Harris | Better logging of OCSP fails |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | Enable OCSP |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | Change CV= log line element for dane-verified cert |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | Capture the knowlege that verification succeeded |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | Verifiable conn with DANE-EE(3) / SPKI(1) / SHA2-512(2) |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | Add support in the fakens utility for TLSA records |
blob | commitdiff | raw | diff to current |
2014-08-10 |
Jeremy Harris | On a host lookup name->MX->A->ip sequence, require... |
blob | commitdiff | raw | diff to current |
2014-08-08 |
Jeremy Harris | Test development |
blob | commitdiff | raw | diff to current |
2014-08-08 |
Jeremy Harris | Testsuite basics. |
blob | commitdiff | raw | diff to current |
2014-08-07 |
Jeremy Harris | Sketch in library interface |
blob | commitdiff | raw | diff to current |
2014-08-04 |
Jeremy Harris | Better logging of OCSP fails |
blob | commitdiff | raw | diff to current |
2014-08-01 |
Jeremy Harris | Fix development-testing induced crash on second use |
blob | commitdiff | raw | diff to current |
2014-08-01 |
Jeremy Harris | Basic DANE entry points |
blob | commitdiff | raw | diff to current |
2014-07-31 |
Jeremy Harris | Add interface documentation for the DANE library |
blob | commitdiff | raw | diff to current |
2014-07-13 |
Jeremy Harris | Fix TLS SNI, and add regression test cases |
blob | commitdiff | raw | diff to current |
2014-05-28 |
Todd Lyons | Merge tag 'exim-4_82_1' exim-4_83_RC1 |
blob | commitdiff | raw | diff to current |
2014-05-26 |
Jeremy Harris | Restrict certificate name checkin for wildcards. |
blob | commitdiff | raw | diff to current |
2014-05-23 |
Jeremy Harris | Add OpenSSL version check |
blob | commitdiff | raw | diff to current |
2014-05-23 |
Jeremy Harris | Move OCSP out of EXPERIMENTAL |
blob | commitdiff | raw | diff to current |
2014-05-20 |
Jeremy Harris | Support optional server certificate name checking.... |
blob | commitdiff | raw | diff to current |
2014-05-17 |
Jeremy Harris | Use accessor functions for OpenSSL internal data |
blob | commitdiff | raw | diff to current |
2014-05-16 |
Jeremy Harris | General tidying |
blob | commitdiff | raw | diff to current |
2014-05-16 |
Jeremy Harris | Tidy certificate verification logic under OpenSSL |
blob | commitdiff | raw | diff to current |
2014-05-12 |
Todd Lyons | Merge branch 'master' of ssh://git.exim.org/home/git... |
blob | commitdiff | raw | diff to current |
2014-05-11 |
Jeremy Harris | Compiler quietening and testcase consistency |
blob | commitdiff | raw | diff to current |
2014-05-09 |
Jeremy Harris | Make $tls_out_ocsp visible to TPDA (mostly testsuite) |
blob | commitdiff | raw | diff to current |
2014-05-06 |
Jeremy Harris | OCSP observability: variables $tls_{in,out}_ocsp |
blob | commitdiff | raw | diff to current |
2014-05-06 |
Jeremy Harris | Refactor tls_client_init interface |
blob | commitdiff | raw | diff to current |
next |