interimap/Changelog, branch v0.5.4 Fast bidirectional synchronization for QRESYNC-capable IMAP servers http://git.guilhem.org/interimap/atom?h=v0.5.4 2020-12-11T10:21:17Z Prepare new release v0.5.4. 2020-12-11T10:21:17Z Guilhem Moulin guilhem@fripost.org 2020-12-11T10:21:17Z urn:sha1:a51f2efacebbf941585809853d1adbfddc165ac2 Prepare new release v0.5.4. 2020-12-11T10:21:11Z Guilhem Moulin guilhem@fripost.org 2020-12-11T10:21:11Z urn:sha1:8130c75c18408ba8e2e635894d87878078e3f1f8 rename 'debian' branch to 'debian/latest' for DEP-14 compliance. 2020-12-11T10:20:42Z Guilhem Moulin guilhem@fripost.org 2020-12-10T22:43:16Z urn:sha1:46fe928647ad8d38ced79a36d38cd152055ed005 Makefile: new 'release' target. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T21:27:59Z urn:sha1:528bf74289c01bcd2b8a8e7e9a99eba41039b09b Also, change the tag format from upstream/$VERSION to v$VERSION. libinterimap: add support for the TLS SNI (Server Name Indication) extension. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T20:52:44Z urn:sha1:4ed6f0982cc0553e31e7beadf441beb8573a07d4 This is controlled by the new 'SSL_hostname' option. The default value of that option is the value of the 'host' option when it is hostname, and the empty string (which disables SNI) when it is an IP literal. libinterimap: make SSL_verify check the hostname as well. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T18:39:10Z urn:sha1:265f133600e9812726a52ea3067409ed3578e882 More precisely, ensure that the certificate Subject Alternative Name (SAN) or Subject CommonName (CN) matches the hostname or IP literal specified by the 'host' option. Previously it was only verifying the chain of trust. This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version 1.0.2. libinterimap: factor out hostname/IP parsing. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T14:26:46Z urn:sha1:84d1829fd0f955cf9fb7add54f60fc314b0d42b1 Also, document that enclosing 'host' value in square brackets forces its interpretation as an IP literal (hence skips name resolution). test suite: always generate new certificates on `make test`. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T13:34:48Z urn:sha1:26e5c04abfb81bdcbd4d89d9f9329b8433920b26 In addition, sign test certificates with the same root CA. Hence running `make test` now requires OpenSSL 1.1.1 or later. libinterimap: show the matching pinned SPKI in --debug mode. 2020-12-11T10:20:37Z Guilhem Moulin guilhem@fripost.org 2020-12-10T13:28:29Z urn:sha1:17b263c49df682fc45f0e50cceb01db4366ad9a7 documentation: replace example.org with example.net for consistency. 2020-12-10T13:24:49Z Guilhem Moulin guilhem@fripost.org 2020-12-10T13:24:49Z urn:sha1:c011e17d4f238882686e3f0e59c444a1c53ac8e3