| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-01-15 | Set an ALARM timer to kill libcouriertls. | Sam Varshavchik | |
| 2021-02-20 | Add support for ALPN. | Sam Varshavchik | |
| 2021-02-20 | Fix access(NULL) call, and a memory leak. | Sam Varshavchik | |
| Seems to be harmless. The memory leak is in a standalong couriertls process, which is mostly a nothing-burger. | |||
| 2020-12-10 | Fix macros. | Sam Varshavchik | |
| 2020-12-06 | LibreSSL compilation error. | Sam Varshavchik | |
| 2020-12-01 | Adding special TLS protocol names that disable client renegotiation. | Andrej Podzimek | |
| 2020-05-12 | Fix manual hostname checking. | Sam Varshavchik | |
| 2020-05-09 | Fix spurious message. | Sam Varshavchik | |
| 2020-04-20 | Fix TLS client connections. | Sam Varshavchik | |
| 2019-12-10 | Restore OpenSSL 1.1, and earlier support. | Sam Varshavchik | |
| Restores code that c8115514b4830a668ce726b2fcb8ab4a3d438ec9 removed, but make it conditionally compiled. Have configure.ac autodetect the openssl version. Correctly UTF8-ize SSL_set_tlsext_host_name()'s parameter. | |||
| 2019-10-08 | Use OpenSSL to verify hostnames. | Sam Varshavchik | |
| 2019-02-03 | Add subject alternative name checking. Implement override_vars option. | Sam Varshavchik | |
| 2019-01-08 | Ignore unreadable cert files. | Sam Varshavchik | |
| 2018-09-26 | Additional fixes. | Sam Varshavchik | |
| 2018-09-12 | [impl] added TLS_PRIVATE_KEYFILE (OpenSSL) | Yoshinari Takaoka | |
| 2017-07-25 | Partially revert de2a130974e1a76daa1893e18442154c7fc90321. | Sam Varshavchik | |
| Put back TLS_PROTOCOL, but use only SSLv23_method, replacing deprecated methods with stubs for their + versions. | |||
| 2017-07-16 | Finalize openssl 1.1.0 by removing TLS_PROTOCOL altogether. | Sam Varshavchik | |
| 2017-07-12 | Another bunch of openssl 1.1.0 fixes. | Sam Varshavchik | |
| 2017-03-15 | Fix TLS verification when DNS lookup comes back with CNAMEs. | Sam Varshavchik | |
| 2017-02-18 | OpenSSL API update. | Sam Varshavchik | |
| 2017-02-07 | OpenSSL API update. | Sam Varshavchik | |
| 2016-09-20 | OpenSSL: remove old deinitialization functions | Sam Varshavchik | |
| 2016-04-30 | Fix server-side openssl SNI. | Sam Varshavchik | |
| Must use SSL_set_SSL_CTX(), instead of loading new certificate into the same CTX. Can't pass the same CTX, because SSL_set_SSL_CTX checks that, and returns without doing anything. Create a 2nd CTX, temporarily attach it to the SSL object, update the certificate in the original CTX, then use SSL_set_SSL_CTX again. Remove redundant call to SSL_CTX_set_session_cache_mode. | |||
| 2016-04-29 | Remove debugging message. | Sam Varshavchik | |
| 2016-04-23 | Stop using SSL2 and SSL3 openssl configuration methods. | Sam Varshavchik | |
| 2016-03-04 | OpenSSL: add support for the TLS SNI extension. | Sam Varshavchik | |
| 2015-07-31 | Check if SSLv3 is available. | Sam Varshavchik | |
| 2015-05-22 | Drop SSLV3 | Sam Varshavchik | |
| 2014-10-21 | tcpd/libcouriertls.c: add additional protocol strings, options. | Sam Varshavchik | |
| 2014-10-15 | tcpd/libcouriertls.c: disable SSLv3 | Sam Varshavchik | |
| 2014-09-21 | libcouriertls.c: initialize temporary ecdh parameters. | Sam Varshavchik | |
| 2014-07-13 | Minor compilation fixes. Basd on patch from Giovanni Bechis <giovanni@paclan.it> | Sam Varshavchik | |
| 2013-11-10 | Update DH parameter configuration scripts. | Sam Varshavchik | |
| * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality. Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS environment variable. * mkdhparams: New script that generates DH parameters into a standalone file. * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and esmtpd-ssl. Add TLS_DHPARAMS. * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl, set default number of bits for RSA keys to 4096. | |||
| 2013-10-14 | 2013-10-14 Sam Varshavchik <mrsam@courier-mta.com> | Sam Varshavchik | |
| * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and TLSv1_2 method(), based on patch by Rob Austein <sra@hactrn.net>. * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the documentation of TLS options in various config files. | |||
| 2013-08-25 | Initial checkin | Sam Varshavchik | |
| Imported from subversion report, converted to git. Updated all paths in scripts and makefiles, reflecting the new directory hierarchy. | |||
 |
index : courier-libs | |
| Courier Mail Server - shared libraries |
| summaryrefslogtreecommitdiffstats |