2007-10-13 11:02:08 by Jukka Salmi | Files touched by this commit (2) |
Log message:
Update to 2.3.1. Changes since 2.3.0:
Fix header loss problem in test mode.
Fix bug #SF1808886: Handle missing or empty test inputs more
gracefully. Based on a patch from Kaspar Brand.
Fix bug #SF1808881: Check various integer conversions for
negative, overflow or inappropriate values. Suggested
by Kaspar Brand.
Feature request #SF1809239: Restore performance of test mode on
large messages. Requested by Kaspar Brand.
Patch #SF1811132: Include <stdlib.h> in test.c for malloc()
prototype. Patch from Daniel Black.
BUILD: Patch #SF1810712: Correct default location for the Tre
regular expression library. Suggested by Daniel Black.
|
2007-10-09 20:18:58 by Jukka Salmi | Files touched by this commit (1) |
Log message:
Add ${PKGMANDIR}/man3 to INSTALLATION_DIRS when building with option
`arlib'. Thanks to Petar Bogdanovic!
|
2007-10-07 15:27:34 by Jukka Salmi | Files touched by this commit (4) |
Log message:
Update to 2.3.0:
2.3.0 2007/10/06
Add "UseSSPDeny" configuration option which causes the filter
to reject messages which are determined to be suspicious
according to the new draft-ietf-dkim-ssp-01, and whose
sending domains advertise a recommended handling of "deny",
and whose SSP records are not in "test" mode.
Add "MaximumSignedBytes" configuration option limiting the number
of bytes of the message body to be signed.
Add "-t" command line option for reading an RFC2822-formatted
message from a named file and attempting to evaluate it,
"-F" command line option for using a fixed signing
time, and "-v" command line option for requesting verbose
output. Finally, new configuration option "StrictTestMode"
asserts that all lines of input must be CRLF-terminated.
Based on patches from Kaspar Brand.
Add "TestPublicKeys" setting for instructing libdkim to read public
keys from a file, for use during automated testing.
Based on a patch from Jeff Barry.
When using _FFR_QUERY_CACHE, periodically report cache activity
statistics.
Don't arbitrarily suppress signing of already-signed messages.
Fix bug #25728: When "AutoRestart" is in use, try to remove the
socket (if it's a UNIX domain socket) prior to trying to
start the child.
LIBDKIM: Add dkim_getmode() function.
LIBDKIM: Fixes to policy evaluation in dkim_policy(). Based on a
patch from Jeff Barry.
LIBDKIM: Patch #SF1796687: Add DKIM_LIBFLAGS_ACCEPTV05 which causes
the library to accept signatures with version strings of
"0.5", i.e. those based on later versions of the DKIM draft
specification. This does not change any other part of
signature validation or canonicalization, only the version
string test. Suggested by Jim Fenton of Cisco.
LIBDKIM: When closing canonicalizations, flush the temporary files
rather than closing them so that things like dkim_reportinfo()
return useful descriptors. Close the temporary files in
dkim_canon_free() only. Problem noted by Jeff Barry.
LIBDKIM: Fix variable argument processing by merging dkim_error()
and dkim_verror(). The previous code was causing
segmentation faults on selected operating systems.
Activate the following FFRs:
_FFR_KEY_REUSE
_FFR_SET_REPLY
|
2007-09-14 12:38:27 by Jukka Salmi | Files touched by this commit (4) |  |
Log message:
Update to 2.2.1. Changes:
2.2.1 2007/09/07
Insert VBR headers at the top rather than appending them to be
sensitive to legacy DomainKeys operations. Patch from
S. Moonesamy of Eland Systems.
Discontinue use of MAXHOSTNAMELEN as the maximum size of a hostname
since some vendors set it to 64 (maximum size of a DNS label)
and some to 256 (maximum size of an FQDN). Instead, define
and use DKIM_MAXHOSTNAMELEN (256). Problem noted by
Jeff Barry.
LIBDKIM: Rename and update the default_signhdrs and default_skiphdrs
arrays to match what's in RFC4871 section 5.5 SHOULD and
SHOULD NOT lists.
LIBDKIM: Apply DKIM_OPTS_SKIPHDRS only when signing.
LIBDKIM: Add missing entries to prv_results, and add a
dkim_getresultstr() function for translating DKIM_STAT
result codes. Patch from Kaspar Brand.
Fix bug #SF1785624: Resolve build problem introduced in previous
version when NETINET6 is in use. Reported by Andrew Benham.
Fix bug #SF1786033: Resolve build problem introduced in previous
version affecting later versions of Solaris. Reported by
Andy Fiddaman.
Fix bug #SF1787473: Initialize the default "-i" list properly (given
changes made in the previous version) so that mail from
localhost still gets signed. Reported by Graham Murray.
2.2.0 2007/08/30
Change format of the peerfile, internal and external host lists, etc.
to allow exclusion entries. See the man page for additional
details.
Amend "-u" to include the ability to name a group into which the
filter process should be placed.
Feature request #SF1783155: Make keylist pattern matching
case-insensitive.
LIBDKIM: Handle CNAMEs properly when using the standard resolver.
Problem noted by Jim Fenton of Cisco.
LIBDKIM: Fix bug #SF1782076: Adjust signature header wrapping logic
so that a "b=" against the margin gets wrapped consistently
when signing and verifying. Reported by Kaspar Brand.
In addition, we don't use libar by default anymore since the libdkim
bug which required this default was fixed in 2.2.0.
|
2007-08-22 17:06:54 by Jukka Salmi | Files touched by this commit (5) |  |
Log message:
Update to 2.1.2. From the RELEASE_NOTES:
LIBDKIM: At the end of dkim_eoh_verify(), don't overwrite any existing
descriptive error text before returning on verification
errors. Problem noted by Andy Fiddaman.
LIBDKIM: Remove redundant assertion of length limits in
dkim_canon_bodychunk(). The code in dkim_canon_write() has it
correct, so use that instead. Problem noted by Mark Martinec.
LIBDKIM: Fix bug #SF1777332: Fix "relaxed" body canonicalization.
Some code from the older implementation was still present
conflicting with the newer code. Reported by Andrey Chernov.
|
2007-08-21 17:25:48 by Jukka Salmi | Files touched by this commit (1) |  |
Log message:
...forgot to update distinfo...
|
2007-08-21 17:24:23 by Jukka Salmi | Files touched by this commit (1) |
Log message:
++PKGREVISION because of bugfixes committed some minutes ago
|
2007-08-21 17:13:53 by Jukka Salmi | Files touched by this commit (3) |
Log message:
Fix relaxed canonicalization and length limit bugs reported today.
|
2007-08-14 15:36:23 by Jukka Salmi | Files touched by this commit (5) |
Log message:
Update to 2.1.1:
Fix type mismatches regarding restricted lengths. Problems noted
by Jukka Salmi.
Fix bug #SF1743896 (reopened): Don't crash if a From: header with no
domain is found. Patch from Andy Fiddaman.
Fix bug #SF1771520: Return an error from dkim_policy() if the
sender's domain name could not be determined. Patch from
Andy Fiddaman.
|
2007-08-13 17:15:44 by Jukka Salmi | Files touched by this commit (3) |
Log message:
Bugfix: don't lie about l= tag when writing statistics.
|