Jeremy Harris [Thu, 14 Feb 2019 16:44:46 +0000 (16:44 +0000)]
Docs: update DKIM standards info
Jeremy Harris [Tue, 12 Feb 2019 16:52:51 +0000 (16:52 +0000)]
Fix transport buffer size handling
Broken-by: 59932f7dcd
Jeremy Harris [Tue, 12 Feb 2019 16:06:46 +0000 (16:06 +0000)]
Testsuite: output changes for OpenSSL versions
Jeremy Harris [Tue, 12 Feb 2019 15:53:11 +0000 (15:53 +0000)]
Testsuite: output changes arising
Jeremy Harris [Tue, 1 Jan 2019 16:21:02 +0000 (16:21 +0000)]
Logging: created Message-IDs. Selectors for created and all IDs. Bugs 219, 1840, 2339
Jeremy Harris [Tue, 12 Feb 2019 11:32:08 +0000 (11:32 +0000)]
Merge branch '4.next'
Jeremy Harris [Sun, 10 Feb 2019 20:25:59 +0000 (20:25 +0000)]
Testsuite: account for (now) properly working Perl locale
Jeremy Harris [Sun, 10 Feb 2019 19:48:57 +0000 (19:48 +0000)]
GnuTLS: trim error messages
Jeremy Harris [Sun, 10 Feb 2019 19:15:43 +0000 (19:15 +0000)]
Testsuite: harden for TLS1.3 under GnuTLS
Jeremy Harris [Sun, 10 Feb 2019 14:32:46 +0000 (14:32 +0000)]
Testsuite: For GnuTLS when we're testing authentications requested via pri-string, disable TLS1.3
On GnuTLS 3.6.5 is appears to ignore the given priority, if it can use 1.3
Jeremy Harris [Tue, 5 Feb 2019 23:19:00 +0000 (23:19 +0000)]
DKIM: ensure that dkim_domain elements are lowercased before use. Bug 2371
(cherry picked from commit
f3c73adaa541ae54092467a29668ac32894ef1dc)
Jeremy Harris [Tue, 5 Feb 2019 18:49:46 +0000 (18:49 +0000)]
Docs: extra detail on proxy-protocol
(cherry picked from commit
5376b7ca07e9b00e2552f33270e79c59840a9778)
Jeremy Harris [Sun, 3 Feb 2019 22:12:48 +0000 (22:12 +0000)]
TLS: add variables for the IETF standard name for the connection ciphersuite
(cherry picked from commit
ffc3d145e3819e1a3762caa1bbe8b07e723fbaf2)
Jeremy Harris [Sun, 3 Feb 2019 21:00:37 +0000 (21:00 +0000)]
Testsuite: munge GnuTLS and OpenSSL ciphersuite strings to be more similar
(cherry picked from commit
25d5d9f98ebb30acc8b269c6594f4bc1e1abe654)
Jeremy Harris [Sun, 3 Feb 2019 11:35:30 +0000 (11:35 +0000)]
tidying
Jeremy Harris [Sat, 2 Feb 2019 15:32:50 +0000 (15:32 +0000)]
Use separate routine for translating return-codes to printable strings
(cherry picked from commit
9c5e54499afef5167bee6ecdcbf8dd5f023f51e0)
Jeremy Harris [Sun, 27 Jan 2019 22:23:31 +0000 (22:23 +0000)]
Debug: config file name & line number for each ACL verb
(cherry picked from commit
9e160d8100cd15517a3444c1ad8ab81e51399582)
Jeremy Harris [Sun, 10 Feb 2019 23:50:39 +0000 (23:50 +0000)]
JSON: add iterative conditions for arrays
(cherry picked from commit
c5c57c4eafde32a0632c2a00bdc634860fc5d06d)
Jeremy Harris [Sat, 9 Feb 2019 17:07:23 +0000 (17:07 +0000)]
JSON: add jsons extract variant, to strip quotes from string results
Jeremy Harris [Sat, 19 Jan 2019 22:28:54 +0000 (22:28 +0000)]
Events: log a non-success when a client connect is denied by an event
(cherry picked from commit
6bc9c745b64e669161a04f4dd72de4dbba9fbdd2)
Jeremy Harris [Wed, 16 Jan 2019 15:12:33 +0000 (15:12 +0000)]
GnuTLS: Debug output keying info. OpenSSL: TLS1.2 keying.
(cherry picked from commit
385b593e795430036b1685eed9d78d6c83cfcd67)
Jeremy Harris [Sat, 9 Feb 2019 16:56:59 +0000 (16:56 +0000)]
Fix json extract operator for unfound case
Jeremy Harris [Sat, 9 Feb 2019 16:48:08 +0000 (16:48 +0000)]
Jeremy Harris [Sat, 5 Jan 2019 20:40:08 +0000 (20:40 +0000)]
EXTERNAL authenticator
(cherry picked from commit
c4a8c663b74a35b547d8320547079ca56b3b772e)
Jeremy Harris [Sat, 5 Jan 2019 17:57:01 +0000 (17:57 +0000)]
Authenticators: refactor SASL support code
(cherry picked from commit
a310a8d09c56e6049714ae4e4070c16ecb6aa2b1)
Jeremy Harris [Sat, 5 Jan 2019 18:51:19 +0000 (18:51 +0000)]
constification
(cherry picked from commit
e8a25e05698e39a45cf5f188476808ef3609dbdd)
Jeremy Harris [Sun, 30 Dec 2018 22:46:25 +0000 (22:46 +0000)]
OpenSSL: send no TLS1.3 session tickets
(cherry picked from commit
09fa60df6e9929364a2c0830eff1e0f4f27ba095)
Jeremy Harris [Sun, 30 Dec 2018 22:51:18 +0000 (22:51 +0000)]
OpenSSL: Debug output TLS 1.3 keying
(cherry picked from commit
3c1f3b85aa4139ba062268ca958bab0dd0d64140)
Jeremy Harris [Sun, 30 Dec 2018 18:17:56 +0000 (18:17 +0000)]
Jeremy Harris [Sat, 29 Dec 2018 19:27:20 +0000 (19:27 +0000)]
Use single TCP segment for SMTP, TLS and TCP closes.
(cherry picked from commit
a7846940c876fd2a76b89240aa83e7083ae9650a)
Jeremy Harris [Sat, 29 Dec 2018 18:41:48 +0000 (18:41 +0000)]
OpenSSSL: support write-with-more-intent in client
(cherry picked from commit
f6a1bb920eebdba0d4a6c295c4d054307b49b2b1)
Jeremy Harris [Sun, 16 Dec 2018 22:24:00 +0000 (22:24 +0000)]
Use C99 initialisations for iterators
(cherry picked from commit
db3f7b6972f3b003c0413b78afcfbe295ffe0b97)
Jeremy Harris [Sun, 10 Feb 2019 23:09:57 +0000 (23:09 +0000)]
Docs: clean for next release
Jeremy Harris [Sun, 10 Feb 2019 20:25:59 +0000 (20:25 +0000)]
Testsuite: account for (now) properly working Perl locale
Jeremy Harris [Sun, 10 Feb 2019 19:48:57 +0000 (19:48 +0000)]
GnuTLS: trim error messages
Jeremy Harris [Sun, 10 Feb 2019 19:15:43 +0000 (19:15 +0000)]
Testsuite: harden for TLS1.3 under GnuTLS
Jeremy Harris [Sun, 10 Feb 2019 19:13:42 +0000 (19:13 +0000)]
Testsuite: output changes resulting
Jeremy Harris [Sun, 10 Feb 2019 15:12:25 +0000 (15:12 +0000)]
Testsuite: munge for TLS1.3 under GnuTLS
Jeremy Harris [Sun, 10 Feb 2019 14:32:46 +0000 (14:32 +0000)]
Testsuite: For GnuTLS when we're testing authentications requested via pri-string, disable TLS1.3
On GnuTLS 3.6.5 is appears to ignore the given priority, if it can use 1.3
Jeremy Harris [Sat, 9 Feb 2019 14:57:46 +0000 (14:57 +0000)]
JSON: fix crashes in ${extract jsons } and ${extract json {digits} }
Broken-by: 386ab6457b and 8fdf20fd84
Jeremy Harris [Tue, 5 Feb 2019 23:19:00 +0000 (23:19 +0000)]
DKIM: ensure that dkim_domain elements are lowercased before use. Bug 2371
Jeremy Harris [Tue, 5 Feb 2019 18:49:46 +0000 (18:49 +0000)]
Docs: extra detail on proxy-protocol
Jeremy Harris [Sun, 3 Feb 2019 22:12:48 +0000 (22:12 +0000)]
TLS: add variables for the IETF standard name for the connection ciphersuite
Jeremy Harris [Sun, 3 Feb 2019 21:00:37 +0000 (21:00 +0000)]
Testsuite: munge GnuTLS and OpenSSL ciphersuite strings to be more similar
Jeremy Harris [Sun, 3 Feb 2019 11:35:30 +0000 (11:35 +0000)]
tidying
Jeremy Harris [Sat, 2 Feb 2019 15:35:14 +0000 (15:35 +0000)]
Testsuite: output changes arising
Broken-by: 9e160d8100
Jeremy Harris [Sat, 2 Feb 2019 15:32:50 +0000 (15:32 +0000)]
Use separate routine for translating return-codes to printable strings
Mad Alex [Wed, 30 Jan 2019 13:57:36 +0000 (13:57 +0000)]
Fix dkim_verify_signers option. Bug 2366
Testsuite coverage by jgh.
Broken-by: d342446f29
Jeremy Harris [Tue, 29 Jan 2019 15:27:26 +0000 (15:27 +0000)]
Docs: clarify quoting for $pipe_addresses
The texinfo output version has single-quotes round a variable,
so the sentence saying "precisely the text" was difficult to
interpret.
Odihambo Washington [Tue, 29 Jan 2019 11:10:26 +0000 (11:10 +0000)]
Docs: correct spamd port
Jeremy Harris [Sun, 27 Jan 2019 22:23:31 +0000 (22:23 +0000)]
Debug: config file name & line number for each ACL verb
Heiko Schlittermann (HS12-RIPE) [Sun, 27 Jan 2019 18:53:31 +0000 (19:53 +0100)]
configure.default: spacing, de-tabbing
Jeremy Harris [Sat, 12 Jan 2019 20:47:23 +0000 (20:47 +0000)]
Add basic framework for PRDR use with per-user content filters to example config.
Mostly commented-out and with dummy lookups since we do not know what sorts
of filtering may be employed.
(cherry picked from commit
b220576b3ba5396af6b3e0f45739f269079f8fc5)
Heiko Schlittermann (HS12-RIPE) [Tue, 22 Jan 2019 21:33:47 +0000 (22:33 +0100)]
mk_exim_release: tidy
Jeremy Harris [Thu, 24 Jan 2019 21:35:22 +0000 (21:35 +0000)]
Docs: crossref list-separator changing
Jeremy Harris [Thu, 24 Jan 2019 21:21:29 +0000 (21:21 +0000)]
Docs: crossref dlfunc API
Jeremy Harris [Wed, 23 Jan 2019 12:45:44 +0000 (12:45 +0000)]
Docs: fix xml
Broken-by: 386ab6457b
Jeremy Harris [Tue, 22 Jan 2019 22:48:14 +0000 (22:48 +0000)]
JSON: add iterative conditions for arrays
Jeremy Harris [Tue, 22 Jan 2019 20:57:58 +0000 (20:57 +0000)]
JSON: add jsons extract variant, to strip quotes from string results
Jeremy Harris [Sat, 19 Jan 2019 22:28:54 +0000 (22:28 +0000)]
Events: log a non-success when a client connect is denied by an event
Jeremy Harris [Wed, 16 Jan 2019 16:52:33 +0000 (16:52 +0000)]
Fix build with older TLS library versions
Jeremy Harris [Wed, 16 Jan 2019 15:12:33 +0000 (15:12 +0000)]
GnuTLS: Debug output keying info. OpenSSL: TLS1.2 keying.
Jeremy Harris [Sun, 13 Jan 2019 17:11:18 +0000 (17:11 +0000)]
Docs: add warning on OCSP must-staple certs vs. client-cert use.
Jeremy Harris [Sat, 12 Jan 2019 20:47:23 +0000 (20:47 +0000)]
Add basic framework for PRDR use with per-user content filters to example config.
Mostly commented-out and with dummy lookups since we do not know what sorts
of filtering may be employed.
Jeremy Harris [Thu, 10 Jan 2019 21:15:11 +0000 (21:15 +0000)]
More checks on header line length during reception
Jeremy Harris [Thu, 10 Jan 2019 19:17:57 +0000 (19:17 +0000)]
Use project memory-management for json lookup
Jeremy Harris [Thu, 10 Jan 2019 13:05:10 +0000 (13:05 +0000)]
Fix json extract operator for unfound case
Jeremy Harris [Wed, 9 Jan 2019 16:49:52 +0000 (16:49 +0000)]
JSON: avoid recent library version usage
Also create feature-macro
Jeremy Harris [Tue, 8 Jan 2019 23:21:19 +0000 (23:21 +0000)]
JSON lookup
Jeremy Harris [Tue, 8 Jan 2019 19:15:29 +0000 (19:15 +0000)]
JSON lookup
Jeremy Harris [Tue, 8 Jan 2019 18:47:41 +0000 (18:47 +0000)]
Add prdr to transport in example configuration, to match documentation
Jeremy Harris [Sat, 5 Jan 2019 20:40:08 +0000 (20:40 +0000)]
EXTERNAL authenticator
Jeremy Harris [Sat, 5 Jan 2019 19:11:18 +0000 (19:11 +0000)]
Docs: tweak TLS authenticator chapter
Jeremy Harris [Sat, 5 Jan 2019 17:57:01 +0000 (17:57 +0000)]
Authenticators: refactor SASL support code
Jeremy Harris [Sat, 5 Jan 2019 18:51:19 +0000 (18:51 +0000)]
constification
Jeremy Harris [Fri, 4 Jan 2019 11:29:19 +0000 (11:29 +0000)]
Docs: missing options
Broken-by: b3ef41c94a
Jeremy Harris [Thu, 3 Jan 2019 21:20:33 +0000 (21:20 +0000)]
Docs: tweak new-drivers chapter
Jeremy Harris [Mon, 31 Dec 2018 13:58:26 +0000 (13:58 +0000)]
PIPE_CONNECT: fix feature-cache refresh
Jeremy Harris [Sun, 30 Dec 2018 22:46:25 +0000 (22:46 +0000)]
OpenSSL: send no TLS1.3 session tickets
Jeremy Harris [Sun, 30 Dec 2018 22:51:18 +0000 (22:51 +0000)]
OpenSSL: Debug output TLS 1.3 keying
Jeremy Harris [Sun, 30 Dec 2018 18:17:56 +0000 (18:17 +0000)]
tidying
Jeremy Harris [Sat, 29 Dec 2018 19:27:20 +0000 (19:27 +0000)]
Use single TCP segment for SMTP, TLS and TCP closes.
Jeremy Harris [Sat, 29 Dec 2018 18:41:48 +0000 (18:41 +0000)]
OpenSSSL: support write-with-more-intent in client
Jeremy Harris [Fri, 28 Dec 2018 20:40:33 +0000 (20:40 +0000)]
Docs: clarify logging from filter
Heiko Schlittermann (HS12-RIPE) [Wed, 26 Dec 2018 11:04:29 +0000 (12:04 +0100)]
Update Changelog for GnuTLS and TLS 1.3 Bug 2359
Fix is in
4896a3192ffac48885347460377edcd893eb9600
Heiko Schlittermann (HS12-RIPE) [Thu, 27 Dec 2018 13:34:56 +0000 (14:34 +0100)]
Update Changelog for GnuTLS 1.3 related fix Bug 2359
Fix is in
06faf21f3a84a3ac4aa4f7b1512087423d8c8541
Andreas Metzler [Mon, 24 Dec 2018 16:11:41 +0000 (16:11 +0000)]
GnuTLS: repeat lowlevel read and write operations while they request retry
(cherry picked from commit
06faf21f3a84a3ac4aa4f7b1512087423d8c8541)
Heiko Schlittermann (HS12-RIPE) [Tue, 25 Dec 2018 19:38:42 +0000 (20:38 +0100)]
mk_exim_release: more perlish
Heiko Schlittermann (HS12-RIPE) [Tue, 25 Dec 2018 18:17:12 +0000 (19:17 +0100)]
mk_exim_release: integrate signing and checksumming
Andreas Metzler [Mon, 24 Dec 2018 16:11:41 +0000 (16:11 +0000)]
GnuTLS: repeat lowlevel read and write operations while they request retry
Jeremy Harris [Sun, 16 Dec 2018 22:24:00 +0000 (22:24 +0000)]
Use C99 initialisations for iterators
Jeremy Harris [Sat, 22 Dec 2018 13:36:07 +0000 (13:36 +0000)]
DKIM: better debug for key/signature size mismatch
Jeremy Harris [Fri, 21 Dec 2018 15:36:42 +0000 (15:36 +0000)]
OpenSSL: clear any leftover errors from the stack after SSL_accept succeeds
Heiko Schlittermann (HS12-RIPE) [Thu, 20 Dec 2018 22:06:38 +0000 (23:06 +0100)]
mk_exim_release: output an useful error message when used for older versions
Older releases can't be built with the newer mk_exim_release script,
as there are interdependencies with scripts/reversion and version.sh
Heiko Schlittermann (HS12-RIPE) [Thu, 20 Dec 2018 21:40:53 +0000 (22:40 +0100)]
Recent commit is thanks to Josh Soref
I managed to drop his name, sorry for that.
Heiko Schlittermann (HS12-RIPE) [Thu, 20 Dec 2018 21:25:23 +0000 (22:25 +0100)]
Grammar changes in docs
Heiko Schlittermann (HS12-RIPE) [Thu, 20 Dec 2018 21:11:52 +0000 (22:11 +0100)]
Fix copyright year and exim website URL schema
klemens [Sun, 16 Apr 2017 18:49:32 +0000 (20:49 +0200)]
spelling fixes
Jeremy Harris [Thu, 20 Dec 2018 17:48:52 +0000 (17:48 +0000)]
Docs: tweaks
Phil Pennock [Wed, 19 Dec 2018 00:41:06 +0000 (19:41 -0500)]
Default config: use ROUTER_SMARTHOST macro; document
Work around the `$host` vs CNAME issue for now by re-specifying the
`tls_sni` value on the example `smarthost_smtp` transport, using the
same macro which we use to turn on use of a smarthost.
Uncomment both dnslookup and smarthost routers by default and let the
macro choose between them.
Bring the documentation of the default configuration closer to
up-to-date, on this issue and others which I spotted while in there.