git.ipfire.org Git - thirdparty/postfix.git/log

]> git.ipfire.org Git - thirdparty/postfix.git/log

projects / thirdparty / postfix.git / log

summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next

commit | commitdiff | tree

Viktor Dukhovni [Thu, 19 Jun 2014 14:58:14 +0000 (10:58 -0400)]

Sanitize non-printables in X509_NAME_oneline output

commit | commitdiff | tree

Viktor Dukhovni [Fri, 13 Jun 2014 02:56:47 +0000 (22:56 -0400)]

Upcoming OpenSSL security levels disable "weak" crypto.

Bitrot:  OpenSSL 1.1.0-dev (aka the "master" branch) has new security
levels ranging from 0 to 5.

  * Level "0" is backwards compatible anything goes.

  * Level "1", the new default, is roughly 80-bit or greater security
    across the board (block ciphers, EDH parameters, EC curves, RSA
    bit lengths, ...).  It also disables anonymous ciphersuites,
    breaking "smtpd_tls_cert_file = none", and in is stronger than
    we want for opportunistic TLS.

  * The remaining levels are for now too strong even for mandatory
    authenticated TLS, they disable RC4, RSA keys shorter than 2048
    bits, and SSLv3.

Therefore, (subject to the presence of the feature detected via
macro recommended by Steve Henson), we revert the default security
level back to 0 in the application SSL context.  Users can if they
wish change this by appending ":@SECURITY=<n>" to the various tls
cipherlists.  TODO: we'll shold also add a main.cf parameter and
policy table overrides for this at some point, provided we can
figure out how to explain yet another "mumble_level" to the users.

When authentication is mandatory in either the SMTP client or in
the SMTP server (smtpd_tls_req_ccert = yes) we set the security
level to 1 to ensure adequately strong parameters.

When testing this, discovered that verification error reasons are
not logged in the SMTP server, cloned and tested corresponding code
from the client.

Sample logging (when client cert has wrong EKU):

    smtpd[63016]: certificate verification failed for localhost[127.0.0.1]: not designated for use as a client certificate
    smtpd[63016]: Untrusted TLS connection established from localhost[127.0.0.1]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
    smtpd[63016]: NOQUEUE: abort: TLS from localhost[127.0.0.1]: Client certificate not trusted

commit | commitdiff | tree

Viktor Dukhovni [Thu, 4 Feb 2016 09:00:27 +0000 (04:00 -0500)]

Bitrot: session_id constification in callbacks

commit | commitdiff | tree

Viktor Dukhovni [Thu, 4 Feb 2016 08:38:57 +0000 (03:38 -0500)]

Bitrot: use RSA_generate_key_ex with OpenSSL >= 1.0.0

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 08:00:23 +0000 (03:00 -0500)]

Bitrot: OpenSSL 1.1.0 constification

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 07:57:53 +0000 (02:57 -0500)]

Bitrot: OpenSSL 1.1.0-dev drops EXPORT ciphers and ephemeral RSA

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 07:45:53 +0000 (02:45 -0500)]

Bitrot: 'SSLeay' function names purged from OpenSSL 1.1.0

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 08:36:05 +0000 (03:36 -0500)]

Bitrot: SSLv2 dropped in OpenSSL 1.1.0

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 08:37:38 +0000 (03:37 -0500)]

Bitrot: SSL_SESSION opaque in OpenSSL 1.1.0

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 08:37:07 +0000 (03:37 -0500)]

Bitrot: CRYPTO_thread_id() deprecated in OpenSSL 1.0.0

Backport from 2.11

commit | commitdiff | tree

Viktor Dukhovni [Sun, 10 Jan 2016 08:38:20 +0000 (03:38 -0500)]

Bitrot: libresolv needed in at least MacOS/X 10.7 and up

Backport from 2.11

commit | commitdiff | tree

Wietse Venema [Sat, 10 Oct 2015 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.15

commit | commitdiff | tree

Wietse Venema [Mon, 20 Jul 2015 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.14

commit | commitdiff | tree

Wietse Venema [Sun, 12 Apr 2015 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.13

commit | commitdiff | tree

Wietse Venema [Sun, 8 Feb 2015 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.12

commit | commitdiff | tree

Wietse Venema [Sun, 19 Oct 2014 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.11

commit | commitdiff | tree

Wietse Venema [Mon, 13 Oct 2014 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.10

commit | commitdiff | tree

Wietse Venema [Thu, 16 Jan 2014 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.9

commit | commitdiff | tree

Wietse Venema [Thu, 5 Sep 2013 12:57:00 +0000 (08:57 -0400)]

postfix-2.9.8

commit | commitdiff | tree

Wietse Venema [Sat, 22 Jun 2013 22:57:00 +0000 (18:57 -0400)]

postfix-2.9.7

commit | commitdiff | tree

Wietse Venema [Mon, 4 Feb 2013 23:24:13 +0000 (23:24 +0000)]

postfix-2.9.6

commit | commitdiff | tree

Wietse Venema [Thu, 13 Dec 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.5

commit | commitdiff | tree

Wietse Venema [Wed, 1 Aug 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.4

commit | commitdiff | tree

Wietse Venema [Sun, 20 May 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.3

commit | commitdiff | tree

Wietse Venema [Tue, 24 Apr 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.2

commit | commitdiff | tree

Wietse Venema [Sat, 18 Feb 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.1

commit | commitdiff | tree

Wietse Venema [Tue, 31 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9.0

commit | commitdiff | tree

Wietse Venema [Tue, 17 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120117

commit | commitdiff | tree

Wietse Venema [Sun, 15 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120115

commit | commitdiff | tree

Wietse Venema [Sat, 14 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120114

commit | commitdiff | tree

Wietse Venema [Tue, 10 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120110

commit | commitdiff | tree

Wietse Venema [Sun, 8 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120108

commit | commitdiff | tree

Wietse Venema [Mon, 2 Jan 2012 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20120102

commit | commitdiff | tree

Wietse Venema [Fri, 30 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111230

commit | commitdiff | tree

Wietse Venema [Sat, 24 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111224

commit | commitdiff | tree

Wietse Venema [Thu, 22 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111222

commit | commitdiff | tree

Wietse Venema [Wed, 21 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111221

commit | commitdiff | tree

Wietse Venema [Mon, 19 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111219

commit | commitdiff | tree

Wietse Venema [Sun, 18 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111218

commit | commitdiff | tree

Wietse Venema [Sat, 17 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111217

commit | commitdiff | tree

Wietse Venema [Tue, 13 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111213

commit | commitdiff | tree

Wietse Venema [Fri, 9 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111209

commit | commitdiff | tree

Wietse Venema [Mon, 5 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111205

commit | commitdiff | tree

Wietse Venema [Sat, 3 Dec 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111203

commit | commitdiff | tree

Wietse Venema [Tue, 29 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111129

commit | commitdiff | tree

Wietse Venema [Sun, 27 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111127

commit | commitdiff | tree

Wietse Venema [Sat, 26 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111126

commit | commitdiff | tree

Wietse Venema [Fri, 25 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111125

commit | commitdiff | tree

Wietse Venema [Tue, 22 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111122

commit | commitdiff | tree

Wietse Venema [Mon, 21 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111121

commit | commitdiff | tree

Wietse Venema [Sun, 20 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111120

commit | commitdiff | tree

Wietse Venema [Sat, 19 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111119

commit | commitdiff | tree

Wietse Venema [Fri, 18 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111118

commit | commitdiff | tree

Wietse Venema [Thu, 17 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111117

commit | commitdiff | tree

Wietse Venema [Sun, 13 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111113

commit | commitdiff | tree

Wietse Venema [Sat, 12 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111112

commit | commitdiff | tree

Wietse Venema [Wed, 9 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111109

commit | commitdiff | tree

Wietse Venema [Tue, 8 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111108

commit | commitdiff | tree

Wietse Venema [Sun, 6 Nov 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111106

commit | commitdiff | tree

Wietse Venema [Tue, 25 Oct 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111025

commit | commitdiff | tree

Wietse Venema [Mon, 24 Oct 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111024

commit | commitdiff | tree

Wietse Venema [Wed, 12 Oct 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20111012

commit | commitdiff | tree

Wietse Venema [Fri, 30 Sep 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110930

commit | commitdiff | tree

Wietse Venema [Sun, 18 Sep 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110918

commit | commitdiff | tree

Wietse Venema [Wed, 7 Sep 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110907

commit | commitdiff | tree

Wietse Venema [Mon, 5 Sep 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110905

commit | commitdiff | tree

Wietse Venema [Sat, 20 Aug 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110820

commit | commitdiff | tree

Wietse Venema [Sun, 14 Aug 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110814

commit | commitdiff | tree

Wietse Venema [Wed, 6 Jul 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110706

commit | commitdiff | tree

Wietse Venema [Wed, 15 Jun 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110615

commit | commitdiff | tree

Wietse Venema [Sun, 5 Jun 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110605

commit | commitdiff | tree

Wietse Venema [Sun, 1 May 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110501

commit | commitdiff | tree

Wietse Venema [Wed, 23 Mar 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110323

commit | commitdiff | tree

Wietse Venema [Tue, 22 Mar 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110322

commit | commitdiff | tree

Wietse Venema [Mon, 21 Mar 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110321

commit | commitdiff | tree

Wietse Venema [Sun, 20 Mar 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110320

commit | commitdiff | tree

Wietse Venema [Sun, 13 Mar 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110313

commit | commitdiff | tree

Wietse Venema [Mon, 28 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110228

commit | commitdiff | tree

Wietse Venema [Sat, 19 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110219

commit | commitdiff | tree

Wietse Venema [Sun, 13 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110213

commit | commitdiff | tree

Wietse Venema [Sat, 12 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110212

commit | commitdiff | tree

Wietse Venema [Mon, 7 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110207

commit | commitdiff | tree

Wietse Venema [Sat, 5 Feb 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110205

commit | commitdiff | tree

Wietse Venema [Sun, 30 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110130

commit | commitdiff | tree

Wietse Venema [Wed, 26 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110126

commit | commitdiff | tree

Wietse Venema [Tue, 25 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110125

commit | commitdiff | tree

Wietse Venema [Mon, 24 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110124

commit | commitdiff | tree

Wietse Venema [Thu, 20 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110120

commit | commitdiff | tree

Wietse Venema [Tue, 18 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110118

commit | commitdiff | tree

Wietse Venema [Mon, 17 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110117

commit | commitdiff | tree

Wietse Venema [Sun, 16 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.9-20110116

commit | commitdiff | tree

Wietse Venema [Sat, 15 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110115

commit | commitdiff | tree

Wietse Venema [Thu, 13 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110113

commit | commitdiff | tree

Wietse Venema [Wed, 12 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110112

commit | commitdiff | tree

Wietse Venema [Sun, 9 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110109

commit | commitdiff | tree

Wietse Venema [Sat, 8 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110108

commit | commitdiff | tree

Wietse Venema [Wed, 5 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110105

commit | commitdiff | tree

Wietse Venema [Mon, 3 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110103

commit | commitdiff | tree

Wietse Venema [Sun, 2 Jan 2011 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20110102

commit | commitdiff | tree

Wietse Venema [Fri, 17 Dec 2010 05:00:00 +0000 (00:00 -0500)]

postfix-2.8-20101217

Mirror of https://github.com/vdukhovni/postfix.git