non-noisy when a race steals the message being considered.
JH/05 If main configuration option tls_certificate is unset, generate a
- selfsigned certificate for inbound TLS connections.
+ self-signed certificate for inbound TLS connections.
JH/06 Bug 165: hide more cases of password exposure - this time in expansions
in rewrites and routers.
JH/24 Bug 1832: Log EHLO response on getting conn-close response for HELO.
-JH/25 Decoding ACL controls is now done using a binary search; the sourcecode
+JH/25 Decoding ACL controls is now done using a binary search; the source code
takes up less space and should be simpler to maintain. Merge the ACL
condition decode tables also, with similar effect.
are not in the system include path.
JH/31 Fix longstanding bug with aborted TLS server connection handling. Under
- GnuTLS, when a sennsion startup failed (eg because the client disconnected)
+ GnuTLS, when a session startup failed (eg because the client disconnected)
Exim did stdio operations after fclose. This was exposed by a recent
change which nulled out the file handle after the fclose.
-
+
+JH/32 Bug 1909: Fix OCSP proof verification for cases where the proof is
+ signed directly by the cert-signing cert, rather than an intermediate
+ OCSP-signing cert. This is the model used by LetsEncrypt.
+
+JH/33 Bug 1914: Ensure socket is nonblocking before draining after SMTP QUIT.
+
+HS/01 Fix leak in verify callout under GnuTLS, about 3MB per recipient on
+ an incoming connection.
Exim version 4.87