Revert "Show the DNSSEC status (ad=) always in -bt/-bv output"
[users/jgh/exim.git] / src / src / tls-gnu.c
2015-06-05 Phil PennockCopyright year updates (things touched in 2015)
2015-04-22 Jeremy HarrisUTF8: Cert namechecks always use a-label
2015-02-01 Jeremy Harrisconstification
2015-01-12 Jeremy HarrisMake smtp transport try server cert verify by default
2015-01-12 Jeremy HarrisMake "system" location for certificate CA bundle the...
2015-01-12 Jeremy HarrisSupport use of system default CA bundle
2015-01-12 Jeremy HarrisMove certificate name checking to mainline, default...
2015-01-12 Jeremy HarrisRefactor common uses of list-checking
2014-11-08 Jeremy HarrisFix smtp transport certificate-verification option...
2014-11-06 Jeremy HarrisEXPERIMENTAL_CERTNAMES: Hostlist for cert name checks...
2014-11-05 Jeremy HarrisDo not permit multi-component wildcards on certificate...
2014-10-30 Jeremy HarrisFix cert-try-verify when denied by event action
2014-10-30 Jeremy HarrisFor connects and certificate-verifies denied by event...
2014-10-25 Jeremy HarrisAdd event for inbound cert visibility
2014-10-25 Jeremy HarrisRename facility to Event Actions, ifdeffed on EXPERIMEN...
2014-10-22 Todd LyonsMerge branch 'master' of ssh://git.exim.org/home/git...
2014-10-22 Jeremy HarrisMore regular logging use of H=<name> [<ip>]
2014-10-20 Todd LyonsMerge branch 'master' of ssh://git.exim.org/home/git...
2014-10-16 Jeremy HarrisHandle certificate dir under GnuTLS, if recent enough
2014-09-23 Todd LyonsMerge remote-tracking branch 'exim_github/pr/18'
2014-09-06 Todd LyonsMerge branch 'master_condition_description'
2014-09-04 Jeremy HarrisEnforce TLS under DANE when host has TLSA records
2014-08-20 Jeremy HarrisMerge branch 'master' into dane
2014-08-20 Jeremy HarrisExpanded EXPERIMENTAL_TPDA feature
2014-07-13 Jeremy HarrisFix TLS SNI, and add regression test cases
2014-05-28 Todd LyonsMerge tag 'exim-4_82_1' exim-4_83_RC1
2014-05-23 Jeremy HarrisAdd GnuTLS version check
2014-05-23 Jeremy HarrisMove OCSP out of EXPERIMENTAL
2014-05-20 Jeremy HarrisSupport optional server certificate name checking....
2014-05-12 Todd LyonsMerge branch 'master' of ssh://git.exim.org/home/git...
2014-05-09 Jeremy HarrisMake $tls_out_ocsp visible to TPDA (mostly testsuite)
2014-05-06 Jeremy HarrisOCSP observability: variables $tls_{in,out}_ocsp
2014-05-06 Jeremy HarrisRefactor tls_client_init interface
2014-05-02 Jeremy HarrisCertificate variables and field-extractor expansions...
2014-04-24 Jeremy HarrisSupport OCSP Stapling under GnuTLS. Bug 1459
2014-04-23 Todd LyonsMerge branch 'master' of git://git.exim.org/exim
2014-04-21 Jeremy HarrisFix testcase "server missing/empty certificate file"
2014-04-19 Todd LyonsCopyright year updates:
2014-03-19 Wolfgang BreyhaAdd tls_verify_hosts and tls_try_verify_hosts to smtp...
2014-03-15 Wolfgang BreyhaAdd tls_verify_hosts and tls_try_verify_hosts to smtp...
2014-02-26 Wolfgang BreyhaAdd tls_verify_hosts and tls_try_verify_hosts to smtp...
2014-01-26 Jeremy HarrisFix tls_verify_certificates in gnutls use. Bug 1413.
2014-01-07 Phil PennockCopyright year updates:
2013-10-22 Todd LyonsMerge branch 'master' of git://git.exim.org/exim exim-4_82_RC5
2013-10-22 Todd LyonsBug 1400: Fix GnuTLS PKCS11 issues
2013-09-01 Phil PennockGnuTLS website moves
2013-04-07 Jeremy HarrisMerge branch 'ocsp_staple_rollup'
2013-03-25 Jeremy HarrisOCSP-stapling enhancement and testing.
2012-10-27 Phil PennockMerge 4.80.1 security fix in.
2012-07-01 Jeremy HarrisMerge branch 'acl'
2012-06-24 Phil PennockAdd gnutls_enable_pkcs11 option.
2012-06-06 Phil PennockBUGFIX: forced-fail smtp option tls_sni would dereferen...
2012-06-04 Jeremy HarrisAdd $tls_in_* variables; note the old names as deprecated.
2012-06-04 Jeremy HarrisFix post-rebase merge issues.
2012-06-04 Jeremy HarrisDual-tls - split management of TLS into in- and out...
2012-06-01 Phil Pennocktls_dh_min_bits smtp transport option
2012-05-31 Phil PennockRevert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512." exim-4_80
2012-05-30 Phil PennockLower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512.
2012-05-28 Phil PennockMerge openssl_disable_ssl2 branch exim-4_80_RC7
2012-05-27 Phil Pennocktypo fix: "overriden" -> "overridden" from Andreas...
2012-05-27 Phil PennockFor DH, use standard primes from RFCs
2012-05-27 Phil Pennock">" -> ">=" for EXIM_CLIENT_DH_MIN_BITS+10
2012-05-27 Phil PennockDeal with GnuTLS DH generation overshoot
2012-05-27 Phil Pennockfix size param for gnutls_dh_params_export_pkcs3()...
2012-05-23 Phil Pennockexpanded comment, noting size types and API issue
2012-05-21 Phil Pennockavoid NUL in dh params file
2012-05-21 Phil PennockAdded tls_dh_max_bits & check tls_require_ciphers early.
2012-05-20 Phil Pennocktls_require_ciphers must be assigned to state copy
2012-05-20 Phil PennockGnuTLS debug callback: check for existing \n
2012-05-18 Phil PennockGnuTLS pretty much passes test suite. exim-4_80_RC1
2012-05-18 Phil PennockCRL addition returns count of CRLs added
2012-05-17 Phil Pennockfix tls_cipher memory lifetime.
2012-05-17 Phil PennockMore GnuTLS cleanups/fixes.
2012-05-17 Phil PennockGnuTLS control constants exposed to Makefile.
2012-05-17 Phil PennockHandle absent tls_require_ciphers correctly.
2012-05-17 Phil PennockGet TLS SNI server-switching working with GnuTLS.
2012-05-17 Phil Pennockfix TLS SNI segfault case
2012-05-17 Phil PennockGuards for older releases of GnuTLS.
2012-05-16 Phil PennockMerge branch 'experimental_ocsp'
2012-05-16 Phil PennockOverhaul of GnuTLS code.
2012-05-05 Jeremy HarrisMerge branch 'master' of git://git.exim.org/exim
2012-05-04 Phil PennockMore tls_sni support: outbound, logging.
2012-02-18 Phil PennockMerge branch 'sasl_fixes'
2012-02-06 Phil PennockImplemented gsasl driver for authentication.
2012-02-04 Phil PennockVarious SASL fixes.
2011-10-03 Phil PennockMerge branch 'list_safety'
2011-09-24 Phil PennockMake sure rc is initialised
2011-09-24 Phil PennockPull Andreas Metzler's fix for gnutls_certificate_verif...
2011-09-24 Phil PennockTLS1.2 and TLS1.1 support with GnuTLS
2011-06-29 Tony FinchRemove obsolete $Cambridge$ CVS revision strings.
2011-03-22 Phil PennockHarmonised TLS library version reporting.
2009-11-16 Nigel MetheringhamUpdate all copyright messages to cover 1995 - 2009...
2009-10-16 Nigel Metheringhamgnutls_compat_mode to allow compatibility with broken...
2009-10-14 Nigel MetheringhamTLS version reporting. fixes: #745
2009-06-10 Tom KistnerMerge native DKIM support (from DEVEL_PDKIM)
2008-09-03 Tony FinchTLS error reporting now respects the incoming_interface and
2007-04-13 Philip HazelCheck for lost connection or unexpected input at end...
2007-01-18 Philip HazelAdd gnutls_require_{kx,mac,protocols}.
2007-01-08 Philip HazelUpdate version number and copyright year.
2006-12-12 Philip HazelApply John Jetmore's patch to allow tls-on-connect...
next