exim.git
20 months agoOpenSSL: fix build on earlier library versions
Jeremy Harris [Sun, 29 Sep 2019 14:20:31 +0000 (15:20 +0100)]
OpenSSL: fix build on earlier library versions

20 months agoOpenSSL: support OCSP stapling on multi-cert servers
Jeremy Harris [Sun, 29 Sep 2019 13:16:36 +0000 (14:16 +0100)]
OpenSSL: support OCSP stapling on multi-cert servers

20 months agotidying
Jeremy Harris [Thu, 19 Sep 2019 17:41:42 +0000 (18:41 +0100)]
tidying

20 months agoDKIM: fix errorcheck in signing, lilbgcrypt version. Bug 2450
Jeremy Harris [Sun, 29 Sep 2019 11:49:34 +0000 (12:49 +0100)]
DKIM: fix errorcheck in signing, lilbgcrypt version.  Bug 2450

20 months agoTestsuite: src/client.c: handle long lines read back from the server
Heiko Schlittermann (HS12-RIPE) [Sat, 28 Sep 2019 16:50:26 +0000 (18:50 +0200)]
Testsuite: src/client.c: handle long lines read back from the server

Increase the buffer for reading data back from the server, and read
at least until a '\n' appears in the input.

20 months agoDocs: add dmarc_tld_file link
Heiko Schlittermann (HS12-RIPE) [Sat, 21 Sep 2019 15:31:03 +0000 (17:31 +0200)]
Docs: add dmarc_tld_file link

20 months agoTestsuite: regression-test for bug. Bug 2449
Jeremy Harris [Fri, 27 Sep 2019 11:21:49 +0000 (12:21 +0100)]
Testsuite: regression-test for bug.  Bug 2449

20 months agoTestsuite: disallow :: as a usable ipv6 address
Jeremy Harris [Thu, 26 Sep 2019 21:36:38 +0000 (22:36 +0100)]
Testsuite: disallow :: as a usable ipv6 address

20 months agoTestsuite: output changes resulting
Jeremy Harris [Thu, 26 Sep 2019 19:29:36 +0000 (20:29 +0100)]
Testsuite: output changes resulting

Broken-by: e326959e5e
20 months agoGnuTLS: full-chain OCSP stapling. Bug 1466
Jeremy Harris [Thu, 26 Sep 2019 18:28:53 +0000 (19:28 +0100)]
GnuTLS: full-chain OCSP stapling.  Bug 1466

20 months agoDNS: do not skip initial two components of SRV & TLSA lookups before checking name...
Simon Arlott [Sun, 22 Sep 2019 17:45:18 +0000 (18:45 +0100)]
DNS: do not skip initial two components of SRV & TLSA lookups before checking name syntax.
The introduction of DKIM added _ to the permitted chars, so those components will pass.

20 months agoDMARC: promote the support from Experimental to mainline
Jeremy Harris [Sun, 22 Sep 2019 14:43:37 +0000 (15:43 +0100)]
DMARC: promote the support from Experimental to mainline

20 months agoDocs: expansion items should use &%name%&
Jeremy Harris [Sun, 22 Sep 2019 13:57:16 +0000 (14:57 +0100)]
Docs: expansion items should use &%name%&

20 months agoTestsuite: handle non-exim-writable testcase spoolfiles
Jeremy Harris [Sun, 22 Sep 2019 11:18:54 +0000 (12:18 +0100)]
Testsuite: handle non-exim-writable testcase spoolfiles

20 months agoFix taint-checking on Solaris
Jeremy Harris [Sun, 22 Sep 2019 09:56:31 +0000 (10:56 +0100)]
Fix taint-checking on Solaris

20 months agoTestsuite: strip trailing / from "pwd" output
Jeremy Harris [Sun, 22 Sep 2019 09:46:39 +0000 (10:46 +0100)]
Testsuite: strip trailing / from "pwd" output

20 months agoGnuTLS: fix build on older libraries
Jeremy Harris [Sat, 21 Sep 2019 22:27:03 +0000 (23:27 +0100)]
GnuTLS: fix build on older libraries

20 months agoTestsuite: comment future work
Jeremy Harris [Sat, 21 Sep 2019 22:16:16 +0000 (23:16 +0100)]
Testsuite: comment future work

20 months agoDocs: usability of malware ACL condition
Jeremy Harris [Sat, 21 Sep 2019 21:22:50 +0000 (22:22 +0100)]
Docs: usability of malware ACL condition

20 months agoGnuTLS: fix build on intermediate-age libraries
Jeremy Harris [Sat, 21 Sep 2019 16:52:56 +0000 (17:52 +0100)]
GnuTLS: fix build on intermediate-age libraries

Broken-by: e54893330b
21 months agoGnuTLS: fix non-OCSP bulid
Jeremy Harris [Fri, 20 Sep 2019 14:53:01 +0000 (15:53 +0100)]
GnuTLS: fix non-OCSP bulid

Broken-by: 7613df821d
21 months agoGnuTLS: Move to more-modern stapling API
Jeremy Harris [Tue, 27 Aug 2019 16:24:23 +0000 (17:24 +0100)]
GnuTLS: Move to more-modern stapling API

21 months agoTestsuite: avoid picking 0.0.0.0 as the HOSTIPV4; permit 10.0/8 apart from 10.250...
Jeremy Harris [Fri, 20 Sep 2019 09:23:46 +0000 (10:23 +0100)]
Testsuite: avoid picking 0.0.0.0 as the HOSTIPV4; permit 10.0/8 apart from 10.250.0/16

Solaris leaves 0.0.0.0 lying around (for not-UP interfaces)
The suite only needs testspace under 10.250.0/16 so we can permit the ret,
making testing on many NATted 10.0/8 subnets possible.

21 months agoFix taint-checking on Solaris
Jeremy Harris [Thu, 19 Sep 2019 21:14:03 +0000 (22:14 +0100)]
Fix taint-checking on Solaris

21 months agoBuild: Solaris workarounds
Martin Preen [Thu, 19 Sep 2019 17:45:04 +0000 (18:45 +0100)]
Build: Solaris workarounds

21 months agoDocs: more detail on log_file_path, in the main-config chapter
Jeremy Harris [Thu, 19 Sep 2019 09:10:57 +0000 (10:10 +0100)]
Docs: more detail on log_file_path, in the main-config chapter

21 months agoDocs: Adjust on TLSA, dnssec_request_domains
Heiko Schlittermann (HS12-RIPE) [Tue, 17 Sep 2019 20:35:00 +0000 (22:35 +0200)]
Docs: Adjust on TLSA, dnssec_request_domains

21 months agoConsistent logging, always use DKIM instead of mixed DKIM/PDKIM
Heiko Schlittermann (HS12-RIPE) [Sun, 15 Sep 2019 19:43:06 +0000 (21:43 +0200)]
Consistent logging, always use DKIM instead of mixed DKIM/PDKIM

21 months agoTestsuite: do not use trailing spaces in runtest
Heiko Schlittermann (HS12-RIPE) [Mon, 16 Sep 2019 10:49:31 +0000 (12:49 +0200)]
Testsuite: do not use trailing spaces in runtest

Some editors may swallow it. Encode trailing space as \x20.

21 months agoTestsuite: bump timeouts, for slower platforms
Jeremy Harris [Sun, 15 Sep 2019 21:06:59 +0000 (22:06 +0100)]
Testsuite: bump timeouts, for slower platforms

21 months agoDoc: Improve pointer to DKIM signing options
Heiko Schlittermann (HS12-RIPE) [Sun, 15 Sep 2019 10:31:24 +0000 (12:31 +0200)]
Doc: Improve pointer to DKIM signing options

21 months agoDoc: Typos
Heiko Schlittermann (HS12-RIPE) [Fri, 13 Sep 2019 14:32:25 +0000 (16:32 +0200)]
Doc: Typos

21 months agoRefuse to open a msglog file with .. in the path.
Jeremy Harris [Tue, 10 Sep 2019 11:29:12 +0000 (12:29 +0100)]
Refuse to open a msglog file with .. in the path.

Recent exploits have use this as a step for overwriting system files,
and msglog file should always be under the spooldir, so add this as
a defence-in-depth tactic

21 months agotidying
Jeremy Harris [Tue, 10 Sep 2019 11:28:44 +0000 (12:28 +0100)]
tidying

21 months agoMove the regression test for CVE-2019-15846 to 1100-Basic-TLS/1100
Heiko Schlittermann (HS12-RIPE) [Tue, 10 Sep 2019 10:49:32 +0000 (12:49 +0200)]
Move the regression test for CVE-2019-15846 to 1100-Basic-TLS/1100

21 months agoTestsuite: munge for timing variance
Jeremy Harris [Sun, 8 Sep 2019 17:16:02 +0000 (18:16 +0100)]
Testsuite: munge for timing variance

21 months agoFix unaligned access (more cleanly) in DNS regative-caching
Jeremy Harris [Sun, 8 Sep 2019 13:41:48 +0000 (14:41 +0100)]
Fix unaligned access (more cleanly) in DNS regative-caching

21 months agoFix unaligned access in DNS negative-caching
Jeremy Harris [Sun, 8 Sep 2019 11:11:16 +0000 (12:11 +0100)]
Fix unaligned access in DNS negative-caching

21 months agostring.c: do not interpret '\\' before '\0' (CVE-2019-15846)
Heiko Schlittermann (HS12-RIPE) [Mon, 19 Aug 2019 12:45:48 +0000 (14:45 +0200)]
string.c: do not interpret '\\' before '\0' (CVE-2019-15846)

Add documents about CVE-2019-15846
Add testcase for CVE-2019-15846
Update Changelog
Add Announcements

(cherry picked from commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f46693563381 and cdc7f9a966)

21 months agoTestsuite: increase RBL record TTL
Jeremy Harris [Sat, 7 Sep 2019 19:52:33 +0000 (20:52 +0100)]
Testsuite: increase RBL record TTL

21 months agoTestsuite: drop test.ex domain neg-cache ttl to 3000
Jeremy Harris [Thu, 5 Sep 2019 15:47:41 +0000 (16:47 +0100)]
Testsuite: drop test.ex domain neg-cache ttl to 3000

21 months agoSupport TTL from SOA for NXDOMAIN & NODATA cache entries for dnslists. Bug 1395
Jeremy Harris [Thu, 5 Sep 2019 09:31:57 +0000 (10:31 +0100)]
Support TTL from SOA for NXDOMAIN & NODATA cache entries for dnslists.  Bug 1395

21 months agoBuild: do not override the system "cc", on Linux and OpenBSD
Jeremy Harris [Thu, 5 Sep 2019 09:32:46 +0000 (10:32 +0100)]
Build: do not override the system "cc", on Linux and OpenBSD

21 months agotidying
Jeremy Harris [Wed, 4 Sep 2019 14:19:42 +0000 (15:19 +0100)]
tidying

21 months agoFix taint-checking on FreeBSD
Jeremy Harris [Wed, 4 Sep 2019 10:07:34 +0000 (11:07 +0100)]
Fix taint-checking on FreeBSD

21 months agotidying
Jeremy Harris [Tue, 3 Sep 2019 20:49:58 +0000 (21:49 +0100)]
tidying

21 months agoTestsuite: platform differences for resolver flags bits
Jeremy Harris [Mon, 2 Sep 2019 11:33:29 +0000 (12:33 +0100)]
Testsuite: platform differences for resolver flags bits

21 months agoBuild: another go at Solaris workarounds
Jeremy Harris [Mon, 2 Sep 2019 10:18:48 +0000 (11:18 +0100)]
Build: another go at Solaris workarounds

21 months agoTestsuite: keep noqualify testcase from using external DNS
Jeremy Harris [Sun, 1 Sep 2019 22:45:43 +0000 (23:45 +0100)]
Testsuite: keep noqualify testcase from using external DNS

21 months agoTestsuite: platform differences for resolver flags bits
Jeremy Harris [Sun, 1 Sep 2019 20:47:11 +0000 (21:47 +0100)]
Testsuite: platform differences for resolver flags bits

21 months agoTestsuite: fix non-ipv6 platforms
Jeremy Harris [Sun, 1 Sep 2019 19:43:02 +0000 (20:43 +0100)]
Testsuite: fix non-ipv6 platforms

Broken-by: 7d8d08c484
21 months agoSupport TTL from SOA for NXDOMAIN & NODATA cache entries. Bug 1395
Jeremy Harris [Sun, 1 Sep 2019 18:44:31 +0000 (19:44 +0100)]
Support TTL from SOA for NXDOMAIN & NODATA cache entries.  Bug 1395

21 months agoAlways check return from tls_export_cert()
Heiko Schlittermann (HS12-RIPE) [Fri, 30 Aug 2019 11:44:01 +0000 (13:44 +0200)]
Always check return from tls_export_cert()

Invert the meaning of the return.

21 months agoTestcase for handling of -H files for excessive long '-KEY' lines
Heiko Schlittermann (HS12-RIPE) [Tue, 27 Aug 2019 19:58:27 +0000 (21:58 +0200)]
Testcase for handling of -H files for excessive long '-KEY' lines

Thanks to Qualys for their analysis. This bug was fixed independently
by JGH.

Tidy.

21 months agoFix ${domain:} for a bare local-part input. Bug 2375
Jeremy Harris [Tue, 27 Aug 2019 16:44:52 +0000 (17:44 +0100)]
Fix ${domain:} for a bare local-part input.  Bug 2375

Broken-by: e2ff8e24f4
22 months agotypos
Jeremy Harris [Mon, 19 Aug 2019 19:06:32 +0000 (20:06 +0100)]
typos

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Mon, 19 Aug 2019 18:32:01 +0000 (19:32 +0100)]
Build: workaround inlining problems on Solaris

22 months agotaint SNI values supplied by client
Jeremy Harris [Mon, 19 Aug 2019 14:50:57 +0000 (15:50 +0100)]
taint SNI values supplied by client

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Mon, 19 Aug 2019 14:25:38 +0000 (15:25 +0100)]
Build: workaround inlining problems on Solaris

22 months agoTestsuite: DNS lookup notes
Jeremy Harris [Mon, 19 Aug 2019 13:23:11 +0000 (14:23 +0100)]
Testsuite: DNS lookup notes

22 months agotaint nonrcpt names read from spool
Jeremy Harris [Mon, 19 Aug 2019 11:03:46 +0000 (12:03 +0100)]
taint nonrcpt names read from spool

22 months agoinlining
Jeremy Harris [Mon, 19 Aug 2019 10:51:43 +0000 (11:51 +0100)]
inlining

22 months agoAppendfile: when evaluating quota use attemd to link counts
Jeremy Harris [Thu, 15 Aug 2019 12:47:04 +0000 (13:47 +0100)]
Appendfile: when evaluating quota use attemd to link counts

22 months agoTestsuite: not all builds include SPF
Jeremy Harris [Wed, 14 Aug 2019 12:32:11 +0000 (13:32 +0100)]
Testsuite: not all builds include SPF

22 months agoSPF: split library init from per-connection init
Jeremy Harris [Tue, 13 Aug 2019 21:33:50 +0000 (22:33 +0100)]
SPF: split library init from per-connection init

22 months agoDMARC: Use exim facilities for DNS lookups
Jeremy Harris [Tue, 13 Aug 2019 12:34:30 +0000 (13:34 +0100)]
DMARC: Use exim facilities for DNS lookups

This enables teststing with the testsuite

22 months agoDNS: use tainted memory for all lookups
Jeremy Harris [Tue, 13 Aug 2019 11:50:38 +0000 (12:50 +0100)]
DNS: use tainted memory for all lookups

22 months agoSPF: use exim facilities for DNS lookups
Jeremy Harris [Tue, 13 Aug 2019 10:58:10 +0000 (11:58 +0100)]
SPF: use exim facilities for DNS lookups

This enables testing with the testsuite

22 months agoDKIM: preferences for verify algorithms
Jeremy Harris [Sat, 10 Aug 2019 16:58:22 +0000 (17:58 +0100)]
DKIM: preferences for verify algorithms

22 months agoRouters: make retry_use_local_part default true when any non-domain condition is...
Jeremy Harris [Thu, 1 Aug 2019 18:31:36 +0000 (19:31 +0100)]
Routers: make retry_use_local_part default true when any non-domain condition is present.  Bug 2408

22 months agoFix ipv6-less build
Jeremy Harris [Sat, 10 Aug 2019 17:29:26 +0000 (18:29 +0100)]
Fix ipv6-less build

Broken-by: de2e5b3dc6
22 months agoDKIM: use tainted mem for dns lookup
Jeremy Harris [Sat, 10 Aug 2019 16:56:30 +0000 (17:56 +0100)]
DKIM: use tainted mem for dns lookup

22 months agoconstify
Jeremy Harris [Sat, 10 Aug 2019 16:55:16 +0000 (17:55 +0100)]
constify

22 months agoLookups: support IPv6 addresses in the spf lookup type. Bug 2378
Jeremy Harris [Sun, 4 Aug 2019 13:38:18 +0000 (14:38 +0100)]
Lookups: support IPv6 addresses in the spf lookup type.  Bug 2378

22 months agoCallouts: filter smtp response for bad chars before using in our smtp response. ...
Jeremy Harris [Sat, 3 Aug 2019 21:22:58 +0000 (22:22 +0100)]
Callouts: filter smtp response for bad chars before using in our smtp response.  Bug 2409

22 months agocompiler quietening
Jeremy Harris [Sat, 3 Aug 2019 15:42:19 +0000 (16:42 +0100)]
compiler quietening

22 months agoFix bogus taint coding in setenv
Jeremy Harris [Sat, 3 Aug 2019 15:40:14 +0000 (16:40 +0100)]
Fix bogus taint coding in setenv

This probably only affects Solaris; where it broke the build

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Sat, 3 Aug 2019 13:18:38 +0000 (14:18 +0100)]
Build: workaround inlining problems on Solaris
Also fix for difference in syscall types for munmap()

22 months agopreallocate store for config
Jeremy Harris [Sat, 6 Jul 2019 21:17:04 +0000 (22:17 +0100)]
preallocate store for config

22 months agoAuth: handle socket read errors in Dovecot authenticator
Bruce Lee [Tue, 30 Jul 2019 21:43:14 +0000 (22:43 +0100)]
Auth: handle socket read errors in Dovecot authenticator

22 months agotidying
Jeremy Harris [Tue, 30 Jul 2019 21:32:08 +0000 (22:32 +0100)]
tidying

22 months agoFix build on OpenBSD
Jeremy Harris [Mon, 29 Jul 2019 16:11:03 +0000 (17:11 +0100)]
Fix build on OpenBSD

22 months agoFix taint-checking on OpenBSD
Jeremy Harris [Mon, 29 Jul 2019 14:48:05 +0000 (15:48 +0100)]
Fix taint-checking on OpenBSD

22 months agotestsuite: interlock callout tests
Jeremy Harris [Sun, 28 Jul 2019 16:34:23 +0000 (17:34 +0100)]
testsuite: interlock callout tests

22 months agoFix crash after TLS channel shutdown
Jeremy Harris [Sun, 28 Jul 2019 13:47:29 +0000 (14:47 +0100)]
Fix crash after TLS channel shutdown

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Sat, 27 Jul 2019 16:11:09 +0000 (17:11 +0100)]
Build: workaround inlining problems on Solaris

22 months agoTestsuite: try to trace intermittent callout fails
Jeremy Harris [Sat, 27 Jul 2019 15:14:51 +0000 (16:14 +0100)]
Testsuite: try to trace intermittent callout fails

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Sat, 27 Jul 2019 14:00:58 +0000 (15:00 +0100)]
Build: workaround inlining problems on Solaris

22 months agoTestsuite: try to trace intermittent callout fails
Jeremy Harris [Thu, 25 Jul 2019 20:42:24 +0000 (21:42 +0100)]
Testsuite: try to trace intermittent callout fails

22 months agoBuild: workaround inlining problems on Solaris
Jeremy Harris [Thu, 25 Jul 2019 19:09:18 +0000 (20:09 +0100)]
Build: workaround inlining problems on Solaris

22 months agoDe-taint library-return string for inet_ntoa() etc
Jeremy Harris [Thu, 25 Jul 2019 18:41:57 +0000 (19:41 +0100)]
De-taint library-return string for inet_ntoa() etc

22 months agoinlining
Jeremy Harris [Thu, 25 Jul 2019 14:34:10 +0000 (15:34 +0100)]
inlining

22 months agoFix dkim_strict expansion. Bug 2413
Ruben Jenster [Fri, 19 Jul 2019 11:56:56 +0000 (12:56 +0100)]
Fix dkim_strict expansion.  Bug 2413

Broken since the introduction of dkim support.
Testsuite additions by jgh

22 months agoTrack tainted data and refuse to expand it
Jeremy Harris [Thu, 25 Jul 2019 11:06:07 +0000 (12:06 +0100)]
Track tainted data and refuse to expand it

22 months agoAvoid re-expansion in ${sort }
Jeremy Harris [Fri, 5 Jul 2019 14:38:15 +0000 (15:38 +0100)]
Avoid re-expansion in ${sort }

22 months agoTestsuite: Debug: indent lowlevel connect result
Jeremy Harris [Mon, 22 Jul 2019 09:13:42 +0000 (10:13 +0100)]
Testsuite: Debug: indent lowlevel connect result

23 months agoTestsuite: better non-TFO-system debug handling
Jeremy Harris [Sat, 20 Jul 2019 21:47:57 +0000 (22:47 +0100)]
Testsuite: better non-TFO-system debug handling

23 months agoDebug: indent lowlevel connect result
Jeremy Harris [Sat, 20 Jul 2019 19:58:24 +0000 (20:58 +0100)]
Debug: indent lowlevel connect result

23 months agoTestsuite: synch log output
Jeremy Harris [Sat, 20 Jul 2019 14:25:23 +0000 (15:25 +0100)]
Testsuite: synch log output

23 months agoDocs: more indexing for sighup
Jeremy Harris [Wed, 17 Jul 2019 09:10:33 +0000 (10:10 +0100)]
Docs: more indexing for sighup