summaryrefslogtreecommitdiffstats
path: root/tcpd/starttls.c
AgeCommit message (Collapse)Author
2022-01-15Set an ALARM timer to kill libcouriertls.Sam Varshavchik
2021-02-20Fix access(NULL) call, and a memory leak.Sam Varshavchik
Seems to be harmless. The memory leak is in a standalong couriertls process, which is mostly a nothing-burger.
2020-04-20Fix regression with user parameterSam Varshavchik
2020-02-26fix ssl client cert authentication (EXTERNAL)FlorianMickler
The connect_callback verify_connection does setenv(TLS_SUBJECT_*) by calling dump_to_fp. These Environment variables are needed to do "AUTHENTICATE EXTERNAL" by doing a user lookup with one of the TLS_SUBJECT_* Variables (specified in the config file via TLS_EXTERNAL). If we call startclient() after the ssl connection has established, we actually do the fork()/exec with the updated environment and thus imapdlogin can do authentication. This error was not producing any error messages besides LOGIN FAILED. :( With this change, i was able to connect with openssl s_client, run "AUTHENTICATE EXTERNAL" and have a successfull login. No further testing was done.
2018-06-28couriertls: add -user optionSam Varshavchik
2018-02-16couriretls: Improve error messages, remove deprecated API usage.Sam Varshavchik
Make gnutls return the same error message about unexpected connection terminatation as the openssl version does.
2013-08-25Initial checkinSam Varshavchik
Imported from subversion report, converted to git. Updated all paths in scripts and makefiles, reflecting the new directory hierarchy.