interimap/Changelog, branch v0.5.4 Fast bidirectional synchronization for QRESYNC-capable IMAP servers Prepare new release v0.5.4. 2020-12-11T10:21:17+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-11T10:21:17+00:00 a51f2efacebbf941585809853d1adbfddc165ac2 






Prepare new release v0.5.4.
2020-12-11T10:21:11+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-11T10:21:11+00:00

8130c75c18408ba8e2e635894d87878078e3f1f8












rename 'debian' branch to 'debian/latest' for DEP-14 compliance.
2020-12-11T10:20:42+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T22:43:16+00:00

46fe928647ad8d38ced79a36d38cd152055ed005












Makefile: new 'release' target.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T21:27:59+00:00

528bf74289c01bcd2b8a8e7e9a99eba41039b09b

Also, change the tag format from upstream/$VERSION to v$VERSION.





Also, change the tag format from upstream/$VERSION to v$VERSION.







libinterimap: add support for the TLS SNI (Server Name Indication) extension.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T20:52:44+00:00

4ed6f0982cc0553e31e7beadf441beb8573a07d4

This is controlled by the new 'SSL_hostname' option.  The default value
of that option is the value of the 'host' option when it is hostname,
and the empty string (which disables SNI) when it is an IP literal.





This is controlled by the new 'SSL_hostname' option.  The default value
of that option is the value of the 'host' option when it is hostname,
and the empty string (which disables SNI) when it is an IP literal.







libinterimap: make SSL_verify check the hostname as well.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T18:39:10+00:00

265f133600e9812726a52ea3067409ed3578e882

More precisely, ensure that the certificate Subject Alternative Name
(SAN) or Subject CommonName (CN) matches the hostname or IP literal
specified by the 'host' option.  Previously it was only verifying the
chain of trust.

This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version
1.0.2.





More precisely, ensure that the certificate Subject Alternative Name
(SAN) or Subject CommonName (CN) matches the hostname or IP literal
specified by the 'host' option.  Previously it was only verifying the
chain of trust.

This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version
1.0.2.







libinterimap: factor out hostname/IP parsing.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T14:26:46+00:00

84d1829fd0f955cf9fb7add54f60fc314b0d42b1

Also, document that enclosing 'host' value in square brackets forces its
interpretation as an IP literal (hence skips name resolution).





Also, document that enclosing 'host' value in square brackets forces its
interpretation as an IP literal (hence skips name resolution).







test suite: always generate new certificates on `make test`.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T13:34:48+00:00

26e5c04abfb81bdcbd4d89d9f9329b8433920b26

In addition, sign test certificates with the same root CA.  Hence
running `make test` now requires OpenSSL 1.1.1 or later.





In addition, sign test certificates with the same root CA.  Hence
running `make test` now requires OpenSSL 1.1.1 or later.







libinterimap: show the matching pinned SPKI in --debug mode.
2020-12-11T10:20:37+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T13:28:29+00:00

17b263c49df682fc45f0e50cceb01db4366ad9a7












documentation: replace example.org with example.net for consistency.
2020-12-10T13:24:49+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T13:24:49+00:00

c011e17d4f238882686e3f0e59c444a1c53ac8e3