Path to this page:
Subject: CVS commit: pkgsrc/mail/swaks
From: Amitai Schleier
Date: 2024-01-04 12:28:18
Message id: 20240104112818.3874DFA42@cvs.NetBSD.org
Log Message:
swaks: update to 20240103.0. Changes:
New Features:
* Added cc and bcc options
* Numerous TLS debugging and verification improvements
o Debug output contains whether a client cert was requested and
whether one was sent
o Add new options tls-verify-ca and tls-verify-host to
differentiate between types of certificate verification (tls-
verify does both)
o Add tls-target option to allow setting of hostname to be used in
hostname verification. This is useful in some inet debugging
situations and required to do hostname verification with socket or
pipe
o Add tls-chain (#60, initial implementation by Wolfgang Karall-
Ahlborn)
o Add tls-get-peer-chain option (analogous to tls-get-peer-cert,
#73)
o Certificate debug now includes all client and peer certs, it a
chain was used (#73)
o Certificate debug now includes notAfter, commonName, and
subjectAltName
Notable Changes:
* output-file, output-file-stderr, and output-file-stdout now truncate
the specified file if it already exists
* Documentation improvements
* Extensive test harness improvements
* Add new stop-point XCLIENT-HELO to address lack of specificity when
mixing XCLIENT usage with the HELO stop-point
* Add new stop-point PROXY
* Use IO::Socket::IP by default. Will still use IO::Socket::INET/INET6 to
cover transition, but this is deprecated and will be removed in the
future (#43)
* TLS session debug information is now printed even if we decide not to
continue the session (eg for failed verification)
* Previously-deprecated functionality to allow some options to be either a
filename or a literal string has been removed. Using the @ sigil is now
the only was to specify file contents
* Previously-deprecated -g option removed
Notable Bugs Fixed:
* TLS certificate verification did not always work. It should now
Files: