interimap/doc, branch debian/0.5.4-1 Fast bidirectional synchronization for QRESYNC-capable IMAP servers rename 'debian' branch to 'debian/latest' for DEP-14 compliance. 2020-12-11T10:20:42+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-10T22:43:16+00:00 46fe928647ad8d38ced79a36d38cd152055ed005 






documentation: improve wording.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T21:41:56+00:00

eb60cecd3c813372ed618751fe5c77229d26df76












libinterimap: add support for the TLS SNI (Server Name Indication) extension.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T20:52:44+00:00

4ed6f0982cc0553e31e7beadf441beb8573a07d4

This is controlled by the new 'SSL_hostname' option.  The default value
of that option is the value of the 'host' option when it is hostname,
and the empty string (which disables SNI) when it is an IP literal.





This is controlled by the new 'SSL_hostname' option.  The default value
of that option is the value of the 'host' option when it is hostname,
and the empty string (which disables SNI) when it is an IP literal.







typofix
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T19:44:40+00:00

09376bac4fe99c542223ba0ae23ad6067410b1fa












libinterimap: make SSL_verify check the hostname as well.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T18:39:10+00:00

265f133600e9812726a52ea3067409ed3578e882

More precisely, ensure that the certificate Subject Alternative Name
(SAN) or Subject CommonName (CN) matches the hostname or IP literal
specified by the 'host' option.  Previously it was only verifying the
chain of trust.

This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version
1.0.2.





More precisely, ensure that the certificate Subject Alternative Name
(SAN) or Subject CommonName (CN) matches the hostname or IP literal
specified by the 'host' option.  Previously it was only verifying the
chain of trust.

This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version
1.0.2.







libinterimap: factor out hostname/IP parsing.
2020-12-11T10:20:41+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T14:26:46+00:00

84d1829fd0f955cf9fb7add54f60fc314b0d42b1

Also, document that enclosing 'host' value in square brackets forces its
interpretation as an IP literal (hence skips name resolution).





Also, document that enclosing 'host' value in square brackets forces its
interpretation as an IP literal (hence skips name resolution).







documentation: replace example.org with example.net for consistency.
2020-12-10T13:24:49+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T13:24:49+00:00

c011e17d4f238882686e3f0e59c444a1c53ac8e3












Fix broken URLs.
2020-12-09T19:03:17+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T19:03:17+00:00

7c5ec1cb62410f8cd7ca31c2d2a5ec92d7f0de7b












typofix
2020-12-09T14:29:59+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T14:29:34+00:00

83f85ee3a6fde64a0809180a13e0cc8a3d703bca












libinterimap: SSL_fingerprint now supports a space-separate list of digests to pin.
2020-12-09T14:29:54+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T14:06:37+00:00

a1ef66a76b4a6651b7371a9fd1e35f2f99e85bfa

And succeeds if, and only if, the peer certificate SPKI matches one of
the pinned digest values.  Specifying multiple digest values can key
useful in key rollover scenarios and/or when the server supports
certificates of different types (for instance RSA+ECDSA).





And succeeds if, and only if, the peer certificate SPKI matches one of
the pinned digest values.  Specifying multiple digest values can key
useful in key rollover scenarios and/or when the server supports
certificates of different types (for instance RSA+ECDSA).