summaryrefslogtreecommitdiffstats
path: root/tcpd
AgeCommit message (Collapse)Author
2017-02-18OpenSSL API update.Sam Varshavchik
2017-02-07OpenSSL API update.Sam Varshavchik
2016-09-20OpenSSL: remove old deinitialization functionsSam Varshavchik
2016-04-30Fix server-side openssl SNI.Sam Varshavchik
Must use SSL_set_SSL_CTX(), instead of loading new certificate into the same CTX. Can't pass the same CTX, because SSL_set_SSL_CTX checks that, and returns without doing anything. Create a 2nd CTX, temporarily attach it to the SSL object, update the certificate in the original CTX, then use SSL_set_SSL_CTX again. Remove redundant call to SSL_CTX_set_session_cache_mode.
2016-04-29Remove debugging message.Sam Varshavchik
2016-04-23Stop using SSL2 and SSL3 openssl configuration methods.Sam Varshavchik
2016-04-16Fix compiler warning.Sam Varshavchik
2016-03-04OpenSSL: add support for the TLS SNI extension.Sam Varshavchik
2015-07-31Check if SSLv3 is available.Sam Varshavchik
2015-05-22Drop SSLV3Sam Varshavchik
2015-02-23courier-imap: add makeimapaccess wrapper, man page.Sam Varshavchik
2015-02-23Add some documentationSam Varshavchik
2014-10-21tcpd/libcouriertls.c: add additional protocol strings, options.Sam Varshavchik
2014-10-15tcpd/libcouriertls.c: disable SSLv3Sam Varshavchik
2014-09-21libcouriertls.c: initialize temporary ecdh parameters.Sam Varshavchik
2014-08-24tcpd: remove any slashes from hostname.Sam Varshavchik
2014-07-13Minor compilation fixes. Basd on patch from Giovanni Bechis <giovanni@paclan.it>Sam Varshavchik
2014-02-15fix for automake >=1.13David Heidelberger
2013-11-10Update DH parameter configuration scripts.Sam Varshavchik
* libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality. Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS environment variable. * mkdhparams: New script that generates DH parameters into a standalone file. * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and esmtpd-ssl. Add TLS_DHPARAMS. * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl, set default number of bits for RSA keys to 4096.
2013-10-142013-10-14 Sam Varshavchik <mrsam@courier-mta.com>Sam Varshavchik
* libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and TLSv1_2 method(), based on patch by Rob Austein <sra@hactrn.net>. * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the documentation of TLS options in various config files.
2013-08-25Renamed configure.in to configure.acSam Varshavchik
2013-08-25Remove deprecated gnutls typesSam Varshavchik
2013-08-25Initial checkinSam Varshavchik
Imported from subversion report, converted to git. Updated all paths in scripts and makefiles, reflecting the new directory hierarchy.