qmail - qmail

	Commit message (Collapse)	Author	Age	Files	Lines
*	Do not enable legacy TLS version any longer	manuel	2025-01-22	1	-2/+0
\|
*	smtp: add support for auth fail reason passed from dovecot auth	manuel	2024-11-28	1	-6/+27
\|
*	Add support for "require TLS"-settings	manuel	2023-09-26	1	-3/+18
\|
*	qmail-smtpd: code cleanup	manuel	2023-09-25	1	-4/+4
\|
*	qmail-smtpd: reduce security level to 0 on port 25	manuel	2023-08-17	1	-2/+2
\|
*	qmail-smtpd: print tls error message on stderr	manuel	2023-08-17	1	-1/+5
\|
*	openssl: ignore unexpected EOF + only 1 session ticket	manuel	2023-08-10	1	-0/+4
\|
*	Disable TLS renegotiation	manuel	2023-08-10	1	-0/+2
\|
*	add support for querying DNSSEC ad (validated) flag	manuel	2023-08-10	1	-1/+0
\| \| \| \|	also migrate from deprecated resolver functions
*	Make qmail openssl 3.0 compatible	manuel	2023-08-08	1	-191/+22
\| \| \| \| \| \| \|	- remove support for loading custom DH params from pem. use opensslconf if really required - remove support for loading custom ec group from params - reimplement DANE support using openssl DANE functions
*	add NOSESSIONHEADER env variable	manuel	2023-04-04	1	-2/+4
\|
*	SMTP: add support for required TLS	manuel	2022-05-19	1	-0/+5
\|
*	Add support for an alternative (ECDSA) certificate	manuel	2022-01-26	1	-8/+19
\|
*	Require HELO/EHLO before MAIL	Manuel Mausz	2021-08-16	1	-2/+5
\|
*	Add X-UD-Smtp-Session to unauthed smtp session aswell	manuel	2020-11-20	1	-2/+5
\|
*	Require TLS 1.2 or above for smtp auth/submission	manuel	2020-08-31	1	-4/+3
\|
*	increase recipients limit to 300	manuel	2019-06-12	1	-1/+1
\|
*	SMTP: limit max errors to 20	manuel	2019-06-11	1	-24/+40
\|
*	max recipients: make error message more consistent	manuel	2019-06-11	1	-1/+1
\|
*	Add max recipients limit	manuel	2019-06-11	1	-1/+10
\|
*	Fix compile warnings...	Manuel Mausz	2019-06-11	1	-5/+6
\|
*	Fix CVE-2011-1431	manuel	2019-04-10	1	-1/+4
\|
*	Remove client certificate left overs	manuel	2019-02-01	1	-12/+0
\|
*	Disable TLS 1.0 only for smtp auth/submission	manuel	2018-12-26	1	-4/+7
\|
*	Disable TLS 1.0	manuel	2018-12-04	1	-1/+1
\|
*	Enable PRIORITIZE_CHACHA per default	manuel	2018-09-17	1	-2/+3
\|
*	More OpenSSL 1.1 compatibility	manuel	2018-06-28	1	-0/+4
\|
*	OpenSSL 1.1 compatibility	Manuel Mausz	2018-06-27	1	-97/+80
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	This adds compatibility for OpenSSL 1.1 Since renegotiation is removed from TLS 1.3 we also removed support for authentication via client certificates (control/tlsclients). In general this is still supported by TLS 1.3 however I'm just lazy and we don't need this feature anyway. This also adds optional support for OpenSSL configuration commands for qmail-smtpd and qmail-remote. Commands are loaded from control/opensslconf. For a list of supported commands see https://www.openssl.org/docs/man1.0.2/ssl/SSL_CONF_cmd.html#SUPPORTED-CONFIGURATION-FILE-COMMANDS
*	Disable SSLv3 and enable prefer server ciphers	manuel	2018-04-16	1	-1/+2
\|
*	Initialize session early for logging	manuel	2018-04-16	1	-0/+1
\|
*	ignore AUTH parameters in MAIL FROM	manuel	2018-04-04	1	-1/+2
\|
*	add X-UD-Smtp-Session and remove ip from authed clients	manuel	2018-04-04	1	-2/+55
\|
*	SMTPUTF8: convert UTF-8 domains to IDNA	manuel	2017-08-18	1	-1/+30
\| \| \| \| \| \| \| \| \| \| \| \| \|	This isn't entirely correct according to RFC 6531 as it's better to not convert at all. However this would require we additionally add the UTF-8 form to qmails local recipient users/domains. Plus our SMTPUTF8 implementation doesn't convert outgoing UTF-8 mails if receiving MTA doesn't support SMTPUTF8. So mail forwarding might generate a bounce the user very likely doesn't understand. As MTAs who support SMTPUTF8 most likely also support the IDNA form, always converting is probably a good trade-off.
*	add support for SMTPUTF8	manuel	2017-08-17	1	-1/+22
\|
*	make qmail support EC keys	manuel	2016-08-07	1	-2/+2
\|
*	implement tls before auth as environment variable	manuel	2016-03-21	1	-8/+10
\|
*	don't announce SMTP AUTH commands if not available	manuel	2016-03-21	1	-7/+10
\|
*	disable SSLv2	manuel	2016-03-01	1	-0/+1
\|
*	add SMTP DANE support	manuel	2015-07-04	1	-11/+10
\|
*	add support for ECDH as well as custom ec+dh params in certificate	manuel	2015-06-23	1	-6/+66
\|
*	Use DH parameters from OpenSSL and remove support for ephemeral RSA	manuel	2015-06-22	1	-28/+64
\| \| \| \|	This adds support for DH parameters from 1024 to 8192 bits.
*	export TLS-Session to environment	manuel	2014-02-14	1	-0/+1
\|
*	make commands argument mandatory	manuel	2014-01-27	1	-7/+7
\|
*	[PATCH] protect qmail-smtpd from large received-lines	manuel	2014-01-27	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	This patch corrects a small programming error in the blast() routine of qmail-smtpd.c. This is sometimes referred to as the "Guninski" bug, in reference to its discoverer. see * http://www.guninski.com/qmailcrash.html * http://thedjbway.b0llix.net/qmail/patches/qmail-1.03.smtpd-blast.patch
*	check for bad chars only for for non-relay sessions	manuel	2013-06-07	1	-1/+1
\| \| \| \| \|	check introduced by ee944357ee374402f20eb1297a0b596f7ef4ea8d (qmail-smtpd-relay-reject.gentoo)
*	disable CRAM_MD5 support	manuel	2013-02-06	1	-1/+1
\|
*	[PATCH] rewriteuser-0.1-qmail-smtpd	manuel	2013-02-06	1	-0/+42
\|
*	[PATCH] qmail-smtpd_auth-ssl-fix-spp	manuel	2013-02-06	1	-2/+11
\|
*	[PATCH] qmail-1.03-r17-greetdelay	manuel	2013-02-06	1	-0/+36
\|
*	[PATCH] realrcptto	manuel	2013-02-05	1	-1/+26
\|