lib-auth-client: auth-master - Introduce local variable for result in auth_lookup_reply_callback()

lib-auth-client: auth-master - Add internal support for initiating invalid requests

This avoids the need to return a NOTFOUND code at request creation when the
request is already known to fail. This is a means to handle this asynchronously.

lib-auth-client: auth-master - Make sending of requests fully asynchronous

lib-auth-client: auth-master - Add debug messages

lib-auth-client: auth-master - Add support for request destroy callback

lib-auth-client: auth-master - Implement auth_master_wait()

This allows waiting until all submitted requests are finished.

lib-auth-client: auth-master - Make request reply handling asynchronous

lib-auth-client: auth-master-request - Use request struct as argument for auth_master_request_send()

lib-auth-client: auth-master - Use new struct auth_master_request for request handling

lib-auth-client: auth-master - Allow duplicate calls to auth_master_unset_io()

lib-auth-client: auth-master - Handle connection failures in auth_master_connection_failure()

lib-auth-client: auth-master - Improve debug logging in auth_lookup_reply_callback()

lib-auth-client: auth-master - Compose command line at a single location

lib-auth-client: auth-master - Drop unnecessary and confusing additional connection events

Only use conn->conn.event instead.

lib-auth-client: auth-master - Do not switch connection event to lookup event during lookup

lib-auth-client: auth-master - Absorb auth_master_event_create()

lib-auth-client: auth-master - Place lookup event in lookup context struct

lib-auth-client: auth-master - Properly parse SPID sent from server

This is currently not used though.

lib-auth-client: auth-master - Call io_loop_stop() at a single location

lib-auth-client: auth-master - Consolidate reply_callback arguments into a reply struct

lib-auth-client: auth-master - Restructure reply parsing

Now it parses the received id into an integer rather than converting the expected id to a string.

lib-auth-client: auth-master - Change reply_callback return type to int

lib-auth-client: auth-master - Add reference counting for the connection object

lib-auth-client: auth-master - Allocate the connection on an alloconly pool

lib-auth-client: auth-master - Restructure auth_user_list_reply_callback()

lib-auth-client: auth-master - Add structural comments

lib-auth-client: auth-master - Rename auth_idle_timeout() to auth_master_idle_timeout()

lib-auth-client: auth-master - Rename conn->request_counter to conn->id_counter

This is shorter and consistent with lib-master/master-login-auth.

lib-auth-client: auth-master - Rename struct auth_master_lookup_ctx to struct auth_master_lookup

lib-auth-client: auth_master - Rename "cmd" parameter to parse_reply() to "reply"

lib-auth-client: auth-master - Move auth_idle_timeout()

lib-auth-client: auth-master - Move auth_master_pass_lookup()

lib-auth-client: auth-master - Move auth_master_cache_flush()

lib-auth-client: auth-master - Move request-related code to new auth-master-request.c

lib-auth-client: auth-master - Make auth_master_connect() public

lib-auth-client: auth-master - Rename auth_connection_close() to auth_master_disconnect() and make it public

lib-auth-client: auth-master - Move call to auth_request_lookup_abort() to central place

This is a preparation for a later changes that add more abort invokations.

lib-auth-client: auth-master - Move definitions to new auth-master-private.h

lib-auth-client: auth-master - Move auth master connection function definitions in header

lib-auth-client: auth-master - Move timeout callbacks

lib-auth-client: auth-master - Move definition of struct auth_master_user_list_ctx

lib-auth-client: auth-master - Move definition of struct auth_master_lookup_ctx

lib-auth-client: auth-master - Move auth_request_lookup_abort()

lib-auth-client: auth-master - Move is_valid_string()

lib-auth-client: auth-master - Move args_hide_passwords()

lib-auth-client: auth-master - Move parse_reply()

lib-auth-client: auth-master - Move auth_lookup_reply_callback()

lib-auth-client: auth-master - Move auth_master_handshake_line()

lib-lua: dluaL_error() - Add noreturn attribute to the function

This helps static analyzers.

lib-storage: mdbox_save_begin() - Drop redundant code.

Found by Coverity, 41954  Operands don't affect result
The comparison with UOFF_T_MAX is always true.

lib-storage: mdbox_map_append_assign_map_uids() - Drop redundant code.

Found by Coverity, 41955, 41956  Operands don't affect result
The comparison with UOFF_T_MAX is always true.

lib-auth-client: Make auth lookups stop if master service is killed

lib-auth: auth-master - Prevent stopped ioloop from hiding error in auth_master_input_line()

lib-oauth2, oauth2: Add oauth2_token_expire_grace setting

lib-oauth2: jwt - Improve error logging for timestamp errors

lib-oauth2: jwt - Allow nbf and iat to point 1 second into future

The token could have just been generated with a server where time is
slightly into the future compared to this server.

global: Use doveadm_print_empty()

doveadm: Add doveadm_print_empty()

lib-lua: Add dlua_push_timeval()

config: Add support for $SET:filter/path/setting

For example $SET:service/auth/service_client_limit

doveadm: Don't print duplicate sub-commands in help output

For example mailbox command output listed "cache|cache|..."

doveadm: Fix printing help for sub-sub-commands

For example "doveadm mailbox" would list all mailbox commands, but
"doveadm mailbox metadata" still listed just mailbox commands, not
"mailbox metadata commands".

lib-storage/index/dbox-multi: mdbox-map - Treat size=0 as last message in record

lib-storage/index/dbox-multi/mdbox-save: dbox_save_mail - Use uoff_t for append_offset

lib-storage/index/dbox-multi/mdbox-storage-rebuild: mdbox_rebuild_msg - Use uoff_t for file-related size/offset

lib-storage/index/dbox-multi: mdbox-map - Use UOFF_T_MAX as special value

imap: cmd-append - Replace spaces with tabs

lib-sql: driver-sqlite - Mark disconnected on disconnect

Forgotten in 6b2738c39a868ff9291867138c55029fc40cf105

lib-sql: Use strchr() based while loop to fill template

This is much faster than going one byte at a time.

auth: ldap - Fix potential crash at deinit

Continuation of 5ff9a8686a29c423e1fcf90f2d36af521cef6f7d. It didn't fix
a situation where there were passdb requests still pending, because
passdb deinit only unreferenced db-ldap and then freed passdb settings.
Only after userdb deinit unreferenced db-ldap again did it try to abort
the ldap requests, but now the passdb settings were already NULL.

login-common: If proxying fails due to remote having invalid SSL cert, don't reconnect

Consistently use LOGIN_PROXY_FAILURE_TYPE_INTERNAL_CONFIG type regardless of
whether the failure happens in ssl_iostream_handshake() or later.

lib-ssl-iostream, global: Rename ssl_iostream_has_[valid_]client_cert() to ssl_iostream_has_[valid_]cert()

These functions can be used (and are used) for both client and server
connections, so it's confusing having the "client" in the function name.

lib-ssl-iostream: Replace ssl_iostream.has_[valid_]client_cert() with new ssl_iostream.get_cert_validity()

lib-ssl-iostream: Remove ssl_iostream_has_handshake_failed()

Its meaning is a bit too ambiguous. It's better for callers to use
ssl_iostream_get_state().

lib-http, lib-smtp: Retry requests on unexpected SSL handshake failures

Retrying should be disabled only when certificate is invalid, not for other
handshake errors.

lib-ssl-iostream: Implement ssl_iostream_is_handshaked() with ssl_iostream_get_state()

lib-ssl-iostream: Add ssl_iostream_get_state()

lib-ssl-iostream: Fix indent

lib-ssl-iostream, global: Change ssl_iostream_handshake_callback_t to return enum

The enum gives more details what failed.

lib-ssl-iostream, global: ssl_iostream_check_cert_validity() - Change return value to enum

The enum gives more details what failed.

auth: Deinitialize userdb before freeing up settings

Some userdbs need the settings during deinitialization.

This was done for passdbs in 054ee6ae3b9a0ec7f669724037cca9059251b138.

login-common: Initialize rawlog after TLS handshake

login-common: Reload client settings before proxying

This allows expanding settings that need username.

login-common: Extract client_reload_settings()

lib-dict-extra: dict-client - Retry transactions on errors if possible

If transaction has "atomic inc" operation, it cannot be retried.

lib-dict-extra: dict-client - Delay sending transactions to dict-server until commit

lib-dict-extra: dict-client - Retry commands when disconnected from server

Commands were previously retried when sending the command failed, but not
afterwards.

lib-dict-extra: dict-client - Add LF to stored query strings

This simplifies the following changes.

lib-dict-extra: dict-client - Add client_dict_cmd_get_log_query() wrapper

lib: unicode-transform - Fix integer comparisons in Hangul functions

lib: iostream-rawlog - Do not log errors for permissions

If permissions are not sufficient, fail silently.

config: Fix chaining $SET variables to a setting with $variables

config: Allow config_write_keyvariable() to fail at expansion time without panic

Needed by the next commit.

config: Prepare for config_get_value() to return different errors

config: Remove special service_* -> $SET:default_* handling

This now works by setting them with regular setting_keyvalues.

config: Assume config parser end hook wants to change default settings

This is what Pigeonhole wants at least. This was already happening a bit
accidentally. Make thie explicit, because the next commit removes the
accidental method.

config: Delay expanding $SET variables until the whole config is parsed

This most importantly fixes using $SET in built-in group settings which
prevents changing the setting in the config file before it is already
expanded.

config: Prepare for storing unexpanded $SET variables into setting values

config: Add and use set_str_expanded() to simplify the following changes

config: Prepare for expanding $SET variables later