Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Improve SSL error messages for common issues | Matthias Andree | 2010-04-18 | 1 | -27/+77 |
| | |||||
* | Call OpenSSL_add_all_algorithms(). | Matthias Andree | 2010-04-06 | 1 | -4/+2 |
| | | | | To fix Debian Bug #576430, reported by Sjoerd Simons. | ||||
* | Use SSL_library_init(), not SSLeay_add_ssl_algorithms(). | Matthias Andree | 2010-04-01 | 1 | -1/+1 |
| | |||||
* | Further warning fixes. | Matthias Andree | 2010-03-19 | 1 | -7/+8 |
| | |||||
* | Fix lots of warnings, most around string literals... | Matthias Andree | 2010-03-18 | 1 | -2/+2 |
| | | | | | | | ...that were converted to char* when they should have been converted to const char *. Use braces for empty if/else statements. | ||||
* | Properly check for h_errno declaration and include netdb.h. | Matthias Andree | 2010-03-05 | 1 | -8/+2 |
| | |||||
* | Remove unused assignments/initializations found with llvm-clang. | Matthias Andree | 2010-02-28 | 1 | -2/+2 |
| | |||||
* | Fix free() of unallocated memory on intact/non-verbose SSL-connections. | Matthias Andree | 2009-08-17 | 1 | -2/+3 |
| | | | | | | | Problem was improper scoping of xfree(tt). Patch courtesy of Thomas Heinz. Fixes Gentoo bug #280760. svn path=/branches/BRANCH_6-3/; revision=5415 | ||||
* | Report Subject Alternative Name before checking for NULs. | Matthias Andree | 2009-08-05 | 1 | -4/+4 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5396 | ||||
* | Use sdump to display non-printing characters in certificate subject names. | Matthias Andree | 2009-08-05 | 1 | -6/+14 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5393 | ||||
* | Abort verification if Subject CommonName/AltName contains NUL. | Matthias Andree | 2009-08-04 | 1 | -7/+20 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5389 | ||||
* | Merge and extend Redhat's AI_ADDRCONFIG patch. | Matthias Andree | 2009-06-14 | 1 | -0/+3 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5357 | ||||
* | case-insensitive check of SSL fingerprints (Daniel Richard G.) | Matthias Andree | 2009-01-22 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | Daniel Richard G. writes: | I was clearing out an old Fetchmail SVN checkout I had lying around | here, and came across one small change that I forgot to send in. | | In socket.c, there's a bit of code that compares SSL certificate | fingerprints: [...] | | That strcmp() call should be an strcasecmp(). At one point, I | encountered a certificate where the fingerprint's hex digits were in a | different case than what was expected, and the connection attempt failed | because of that. Not exactly what you'd call a potential MitM attack | :-) He's right, we can compare case-insensitively without sacrificing fetchmail's security, so let's just do that for the sake of ease of use. svn path=/branches/BRANCH_6-3/; revision=5262 | ||||
* | Fix a few compiler warnings around implicit conversion or extra ";". | Matthias Andree | 2009-01-14 | 1 | -2/+2 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5261 | ||||
* | SSL_free(context) when SSL_connect fails, plugging memleak. By Seiichi Ikarashi. | Matthias Andree | 2008-11-13 | 1 | -0/+2 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5237 | ||||
* | SSL fix: check and report if SSL_set_fd fails. | Matthias Andree | 2008-07-03 | 1 | -4/+5 |
| | | | | | | SSL change: enable all workarounds with SSL_CTX_set_options(ctx,SSL_OP_ALL) svn path=/branches/BRANCH_6-3/; revision=5214 | ||||
* | Partially uncommit the botched commit r5117 so I can create proper changelogs. | Matthias Andree | 2008-07-03 | 1 | -5/+4 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5212 | ||||
* | Drop dead code under FORCE_STUFFING condition. | Matthias Andree | 2008-01-31 | 1 | -49/+0 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5155 | ||||
* | Document arcane SSL/TLS UI issue and require docs, Debian Bug#432618. | Matthias Andree | 2007-07-24 | 1 | -4/+5 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=5117 | ||||
* | Fix Debian Bug#400950, certificate CN overrides --user option. Now it's only a | Matthias Andree | 2006-12-18 | 1 | -1/+1 |
| | | | | | | default and --user takes precedence. svn path=/branches/BRANCH_6-3/; revision=4994 | ||||
* | SSL_CTX handling fix by Miloslav Trmac (Red Hat), | Matthias Andree | 2006-09-25 | 1 | -33/+37 |
| | | | | | | fixes growing SSL certpaths without bounds (Red Hat Bug #206346). svn path=/branches/BRANCH_6-3/; revision=4912 | ||||
* | Add IMAP AUTH=EXTERNAL support. BerliOS Patch #1095. | Matthias Andree | 2006-08-14 | 1 | -5/+43 |
| | | | | | | | Courtesy of Götz 'nimrill' Babin-Ebell. This patch also makes --sslproto arguments case insensitive. svn path=/branches/BRANCH_6-3/; revision=4896 | ||||
* | Wrap getaddrinfo() and block SIGALRM where needed. | Matthias Andree | 2006-08-14 | 1 | -2/+2 |
| | | | | | | Also wrap freeaddrinfo() without added functionality. svn path=/branches/BRANCH_6-3/; revision=4895 | ||||
* | Freeaddrinfo() fix for Uli Zappe's bug. | Matthias Andree | 2006-08-07 | 1 | -5/+7 |
| | | | | | | This might fix Debian Bug#294547 and Bug#377135. svn path=/branches/BRANCH_6-3/; revision=4880 | ||||
* | When trying to connect or upon connection failure, log the numeric service ↵ | Matthias Andree | 2006-08-01 | 1 | -3/+6 |
| | | | | | | port, too. svn path=/branches/BRANCH_6-3/; revision=4875 | ||||
* | When connect()ing fails, log host and service as well. | Matthias Andree | 2006-08-01 | 1 | -1/+1 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4873 | ||||
* | In verbose mode, log every IP fetchmail tries to connect to, to avoid | Matthias Andree | 2006-05-14 | 1 | -4/+36 |
| | | | | | | | misleading the user. Suppress EAFNOSUPPORT errors from socket() call, too. Fixes Debian Bug #361825. svn path=/branches/BRANCH_6-3/; revision=4836 | ||||
* | Trivial: Revise comment. | Matthias Andree | 2006-05-12 | 1 | -3/+2 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4822 | ||||
* | * SSL/TLS: if, for a certain server, an sslfingerprint is specified and | Matthias Andree | 2006-04-06 | 1 | -9/+8 |
| | | | | | | | | | sslcertck is NOT set, suppress printing SSL certificate mismatch errors. (Reported by Hannes Erven.) * SSL/TLS: always print if the sslfingerprint mismatches, even in silent mode. (This is for consistency with certificate verification errors.) svn path=/branches/BRANCH_6-3/; revision=4781 | ||||
* | Fix typo on comment. | Matthias Andree | 2006-04-02 | 1 | -1/+1 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4771 | ||||
* | a few more type fixes for report/snprintf, patch by Miloslav Trmac. | Matthias Andree | 2006-04-01 | 1 | -1/+1 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4767 | ||||
* | More warning fixes (from FreeBSD 6.1). | Matthias Andree | 2006-03-25 | 1 | -2/+2 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4753 | ||||
* | Further cleanups to compile with C++ compiler. | Matthias Andree | 2006-03-15 | 1 | -3/+3 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4744 | ||||
* | merge Mirek's fetchmail-signed.patch | Matthias Andree | 2006-03-14 | 1 | -8/+10 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4734 | ||||
* | Fix a few compiler warnings through casts. | Matthias Andree | 2006-01-11 | 1 | -1/+1 |
| | | | | | | Make MD5Update argument const. svn path=/branches/BRANCH_6-3/; revision=4621 | ||||
* | Some verbose output disappeared in debug mode. Adding further -v options | Matthias Andree | 2006-01-04 | 1 | -4/+4 |
| | | | | | | | | would alternate between verbose and debug mode. debug mode now comprises all verbose output, and adding more -v options does not switch back from debug to verbose mode. svn path=/branches/BRANCH_6-3/; revision=4597 | ||||
* | Add a comment. | Matthias Andree | 2006-01-04 | 1 | -0/+4 |
| | | | | svn path=/branches/BRANCH_6-3/; revision=4595 | ||||
* | Actually set default SSL certificate path if --sslcertpath is unset. | Matthias Andree | 2005-12-07 | 1 | -0/+2 |
| | | | | | | Reported by Heino Tiedemann and Rob MacGregor. svn path=/branches/BRANCH_6-3/; revision=4516 | ||||
* | Add support for SubjectAltName (RFC-2595 or 2818). Patch by Roland Stigge, ↵ | Matthias Andree | 2005-10-29 | 1 | -2/+32 |
| | | | | | | Debian Bug#201113. svn path=/trunk/; revision=4368 | ||||
* | Properly shut down SSL connections. Berlios Patch #647 by Arkadiusz Miśkiewicz. | Matthias Andree | 2005-10-21 | 1 | -0/+2 |
| | | | | svn path=/trunk/; revision=4360 | ||||
* | Put pointer to FAQ in parentheses. | Matthias Andree | 2005-09-22 | 1 | -1/+1 |
| | | | | svn path=/trunk/; revision=4317 | ||||
* | Add full support for --service option. | Matthias Andree | 2005-09-21 | 1 | -1/+1 |
| | | | | svn path=/trunk/; revision=4308 | ||||
* | Revise error messages, suggested by Thomas Wolff. | Matthias Andree | 2005-09-21 | 1 | -1/+3 |
| | | | | svn path=/trunk/; revision=4306 | ||||
* | Large protocol independence patch. | Matthias Andree | 2005-08-28 | 1 | -136/+5 |
| | | | | svn path=/trunk/; revision=4280 | ||||
* | Don't convert service to port and back, but pass service to plugin. | Matthias Andree | 2005-08-03 | 1 | -3/+1 |
| | | | | svn path=/trunk/; revision=4233 | ||||
* | Remove junk. | Matthias Andree | 2005-08-03 | 1 | -4/+0 |
| | | | | svn path=/trunk/; revision=4232 | ||||
* | Remove port/service dualism and make everything a service. | Matthias Andree | 2005-08-02 | 1 | -7/+11 |
| | | | | svn path=/trunk/; revision=4219 | ||||
* | Cleanup: Drop inner_connect and ipv6-connect.c. | Matthias Andree | 2005-08-01 | 1 | -8/+0 |
| | | | | svn path=/trunk/; revision=4214 | ||||
* | INCOMPATIBLE: DROP --netsec/-T option, NET_SECURITY macro - the required ↵ | Matthias Andree | 2005-07-30 | 1 | -24/+2 |
| | | | | | | library is no longer available. svn path=/trunk/; revision=4192 | ||||
* | Merge SuSE's fetchmail-6.2.5-implicit-declaration.patch | Matthias Andree | 2005-04-25 | 1 | -0/+11 |
| | | | | svn path=/trunk/; revision=4036 |