interimap/doc, branch debian/buster-backports

interimap/doc, branch debian/buster-backports Fast bidirectional synchronization for QRESYNC-capable IMAP servers doc/template.html: remove type attribute from <style/> element. 2021-01-01T15:04:34+00:00 Guilhem Moulin guilhem@fripost.org 2021-01-01T15:03:12+00:00 e90d1375130612184e904dbec2b4577d74927dae

Bump required Net::SSLeay version to 1.86_06. 2021-01-01T14:55:03+00:00 Guilhem Moulin guilhem@fripost.org 2021-01-01T14:48:20+00:00 55b8c321048b1d4ebfbd30968e11d2a68ee4d242 That's when get_version() was introduced. Unfortunately the manual doesn't mention it, but 1.85 is lacking the function, see https://github.com/radiator-software/p5-net-ssleay/blob/1.88/Changes#L216 https://github.com/radiator-software/p5-net-ssleay/commit/ae33bb5405dadde973bc25a0c5e3941d5c83f8b1 Compatibility with Net::SSLeay 1.83 can be restored by reverting this commit and 35f4ecefa9c9ff55acfdb337b215e3d13345c86d.

That's when get_version() was introduced.  Unfortunately the manual
doesn't mention it, but 1.85 is lacking the function, see

    https://github.com/radiator-software/p5-net-ssleay/blob/1.88/Changes#L216
    https://github.com/radiator-software/p5-net-ssleay/commit/ae33bb5405dadde973bc25a0c5e3941d5c83f8b1

Compatibility with Net::SSLeay 1.83 can be restored by reverting this
commit and 35f4ecefa9c9ff55acfdb337b215e3d13345c86d.

libinterimap: new option SSL_ciphersuites to set the TLSv1.3 ciphersuites. 2020-12-17T16:41:30+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-17T16:38:17+00:00 57988c83bb4b3f1780f045880ac4a8f36a51c55c Also, clarify that SSL_cipherlist only applies to TLSv1.2 and below. See SSL_CTX_set_cipher_list(3ssl).

Also, clarify that SSL_cipherlist only applies to TLSv1.2 and below.
See SSL_CTX_set_cipher_list(3ssl).

manuals: Clarify that known TLS protocol versions depend on the OpenSSL version used. 2020-12-17T13:55:55+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-17T13:54:34+00:00 1a19feb7a4b3d70f44e4e1fb0f9920b063842422

manual: improve wording. 2020-12-13T17:47:51+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-13T17:47:51+00:00 ae2e4297e0a298444e94e89264e5d814a34ec61d

libinterimap: use default locations for trusted CA certificates when neither CAfile nor CApath are set. 2020-12-13T17:44:18+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-13T16:43:52+00:00 8c43ed9baa905d907a6aad77de2282a852ba69a9 In particular, OpenSSL's default locations can be overridden by the SSL_CERT_FILE resp. SSL_CERT_DIR environment variables, see SSL_CTX_load_verify_locations(3ssl). This bumps the minimum OpenSSL version to 1.1.0 (when SSL_verify is used).

In particular, OpenSSL's default locations can be overridden by the
SSL_CERT_FILE resp. SSL_CERT_DIR environment variables, see
SSL_CTX_load_verify_locations(3ssl).

This bumps the minimum OpenSSL version to 1.1.0 (when SSL_verify is
used).

typofix, spelling 2020-12-12T10:15:36+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-11T20:24:32+00:00 ea120902dfe146cd7f04a289da9fa05a9e06e44c

libinterimap: deprecate SSL_protocols and introduce SSL_protocol_{min,max}. 2020-12-11T18:33:30+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-11T17:39:46+00:00 feeb91998a29ca040f6e5dd103e09507a6355e32 Using the libssl interface simplifies our protocol black/whitelist greatly; this only allows simple min/max bounds, but holes are arguably not very useful here. Using the new settings bumps the required libssl version to 1.1.0.

Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.

libinterimap: remove default SSL_protocols value. 2020-12-11T17:32:16+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-11T14:09:15+00:00 e3b95b0da424e55682c8c7b025d9d272a4a35ffe Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1". As of Debian Buster (OpenSSL 1.1.1) this does not make a difference, however using the system default provides better compatibility with future libssl versions.

Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1".

As of Debian Buster (OpenSSL 1.1.1) this does not make a difference,
however using the system default provides better compatibility with
future libssl versions.

manpages: improve wording. 2020-12-11T11:38:37+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-11T11:38:37+00:00 f247a5ed7f92b46341ce51bfe6ee4893d23715be