| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
These can be used before setting up or after closing down a socket
for protocol-specific initialisiation or cleanup, and are required
to cleanly fix up the IMAP-loses-protocol-version regression without
too many temporary hacks in the code.
|
|
|
|
|
|
|
|
| |
Reported by Bjørn Mork, fixes Debian Bug#992400.
Crash happens inside xstrdup() on a strlen((char *)-1) where
the argument is constant and the trigger is a local trusted
configuration file, so not deemed a vulnerability.
|
|
|
|
| |
to make code more correct or readable; to64frombits does not overflow its buffer
|
|
|
|
|
|
|
|
|
|
|
| |
...and compile it as standalone test program. After "make check",
you can check t.tls-aux.log in the build area for the defaults.
Note that environment overrides can be made, see
SSL_CTX_set_default_verify_paths(3) or, for instance,
https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_default_verify_paths.html
OpenSSL 3.x may ship an openssl-env(7) manual page.
|
| |
|
|
|
|
|
|
|
| |
All such uses in fetchmail stem from AC_CHECK_DECLS(),
which will always define a HAVE_DECL_ macro with either 0 or 1,
thus we must not check if that macro is defined, but we
must check its value.
|
|
|
|
| |
Fixes #3 (Gitlab issue#).
|
|
|
|
|
|
|
|
| |
The fix between 6.4.0-rc4 and 6.4.0 for Debian Bug#941129 caused
a regression in the default file locations, some files were looked
for without dot (.fetchmail.pid, .fetchmailrc).
Reported by Cy Schubert.
|
|
|
|
|
|
| |
* Normalize include order.
* Backport missed bug fixes.
* Remove dead code.
|
|
|
|
| |
Reported by: Jens Schleusener (fossies.org)
|
| |
|
|
|
|
| |
Reported by: autoupdate.
|
| |
|
|
|
|
|
|
|
| |
Import Rainer Weikusat's code that uses Patricia trees instead of linear
lists.
Snapshot Rainer's patch 2010-05-24 19:30:42
|
|
|
|
| |
(Cherry-picked from master's 1a92b2909610096a11d26f7a7317d32819354be3.)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Removes SSLv2, enables TLSv1.1 and v1.2 more easily,
permits SSLv3 (only if specified) and newer TLSv1.1+ for STLS/STARTTLS.
Only negotiates TLSv1 and newer by default, SSLv3 must now be specified
explicitly, as a consequence of the POODLE attack.
This is meant to be a minimally upgraded version, and cannot be usefully
done as a 6.3.X release.
It is strongly recommended that users review their configuration -
especially --sslproto - per instructions in the NEWS file and manual
page. It has changed semantics and in many cases --sslproto auto or
perhaps --sslproto tls1.2+ should be used now.
|
|
|
|
| |
Reported by Gonzalo Pérez de Olaguer Córdoba, Debian Bug#744907.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Add gen_recv_split() to split long protocol messages when the message prefix matches
Order of search commands:
IMAP> A010 SEARCH UNSEEN UNDELETED (IMAP4 or higher)
IMAP> A011 SEARCH UNSEEN
IMAP> A012 FETCH 1:n FLAGS
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
Exchange 2007 wedges if we try GSSAPI authentication and fail for lack of
suitable credentails (for instance, because the user did not run kinit).
Only try GSSAPI automatically if we have credentials.
Reported by Patrick Rynhart, Debian Bug #568455,
and Alan Murrell, to the fetchmail-users list.
|
| |
|
| |
|
| |
|
|
|
|
| |
and always load the default X.509 trust stores, unless the latter is set.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
...that were converted to char* when they should have been converted to
const char *.
Use braces for empty if/else statements.
|
|
|
|
| |
to resolve an ambiguity found by Frédéric Marchal.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The IMAP client no longer skips messages from several IMAP servers including
Dovecot if fetchmail's "idle" is in use. Causes were that fetchmail (a)
ignored some untagged responses when it should not (b) relied on EXISTS
messages in response to EXPUNGE, which aren't mandated by RFC-3501 (the IMAP
standard) and aren't sent by Dovecot either.
Fix by Sunil Shetye (the fix also consolidates IMAP response handling,
improving overall robustness of the IMAP client), bug report and testing by
Matt Doran, with further hints from Timo Sirainen.
svn path=/branches/BRANCH_6-3/; revision=5459
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=5390
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fetchmail no longer drops permanently undelivered messages by default,
to match historic documentation. It does this by adding a new
"softbounce" option, see below.
Fixes Debian Bug#471283, demotes Debian Bug#494418 to wishlist.
There is a new "softbounce" global option that prevents the deletion of
messages that have not been forwarded. It defaults to "true" for
fetchmail 6.3.X in order to match historic documentation. This may
change its default in the next major release.
NOTE: untested.
svn path=/branches/BRANCH_6-3/; revision=5315
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Progress tickers had been used inconsistently for a long time, and
documentation was outdated, too. Factor out common code to ease
maintenance, use the report_flush() function, and add and use a macro
(want_progress()) to determine if progress ticker output is desired.
This makes for a much more consistent look on screen and in logfiles and
should be much easier to fix later on.
TODO: test syslog output.
svn path=/branches/BRANCH_6-3/; revision=5290
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=5289
|
|
|
|
|
|
|
|
| |
Exception from no-features policy on 6.3.X is made to keep people away from
doing more dangerous things in order to get rid of CommonName mismatch
warnings.
svn path=/branches/BRANCH_6-3/; revision=5165
|
|
|
|
|
|
| |
prone to symlink attacks. Found by Nico Golde.
svn path=/branches/BRANCH_6-3/; revision=5134
|
|
|
|
|
|
| |
Leurent-style MITM attacks which are based on MD5 and APOP weaknesses.
svn path=/branches/BRANCH_6-3/; revision=5057
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=4991
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=4962
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=4924
|
|
|
|
| |
svn path=/branches/BRANCH_6-3/; revision=4911
|
|
|
|
|
|
|
| |
Courtesy of Götz 'nimrill' Babin-Ebell.
This patch also makes --sslproto arguments case insensitive.
svn path=/branches/BRANCH_6-3/; revision=4896
|
|
|
|
|
|
| |
Also wrap freeaddrinfo() without added functionality.
svn path=/branches/BRANCH_6-3/; revision=4895
|