interimap/doc, branch v0.5.4 Fast bidirectional synchronization for QRESYNC-capable IMAP servers http://git.guilhem.org/interimap/atom?h=v0.5.4 2020-12-11T10:20:42Z rename 'debian' branch to 'debian/latest' for DEP-14 compliance. 2020-12-11T10:20:42Z Guilhem Moulin guilhem@fripost.org 2020-12-10T22:43:16Z urn:sha1:46fe928647ad8d38ced79a36d38cd152055ed005 documentation: improve wording. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T21:41:56Z urn:sha1:eb60cecd3c813372ed618751fe5c77229d26df76 libinterimap: add support for the TLS SNI (Server Name Indication) extension. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T20:52:44Z urn:sha1:4ed6f0982cc0553e31e7beadf441beb8573a07d4 This is controlled by the new 'SSL_hostname' option. The default value of that option is the value of the 'host' option when it is hostname, and the empty string (which disables SNI) when it is an IP literal. typofix 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T19:44:40Z urn:sha1:09376bac4fe99c542223ba0ae23ad6067410b1fa libinterimap: make SSL_verify check the hostname as well. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T18:39:10Z urn:sha1:265f133600e9812726a52ea3067409ed3578e882 More precisely, ensure that the certificate Subject Alternative Name (SAN) or Subject CommonName (CN) matches the hostname or IP literal specified by the 'host' option. Previously it was only verifying the chain of trust. This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version 1.0.2. libinterimap: factor out hostname/IP parsing. 2020-12-11T10:20:41Z Guilhem Moulin guilhem@fripost.org 2020-12-10T14:26:46Z urn:sha1:84d1829fd0f955cf9fb7add54f60fc314b0d42b1 Also, document that enclosing 'host' value in square brackets forces its interpretation as an IP literal (hence skips name resolution). documentation: replace example.org with example.net for consistency. 2020-12-10T13:24:49Z Guilhem Moulin guilhem@fripost.org 2020-12-10T13:24:49Z urn:sha1:c011e17d4f238882686e3f0e59c444a1c53ac8e3 Fix broken URLs. 2020-12-09T19:03:17Z Guilhem Moulin guilhem@fripost.org 2020-12-09T19:03:17Z urn:sha1:7c5ec1cb62410f8cd7ca31c2d2a5ec92d7f0de7b typofix 2020-12-09T14:29:59Z Guilhem Moulin guilhem@fripost.org 2020-12-09T14:29:34Z urn:sha1:83f85ee3a6fde64a0809180a13e0cc8a3d703bca libinterimap: SSL_fingerprint now supports a space-separate list of digests to pin. 2020-12-09T14:29:54Z Guilhem Moulin guilhem@fripost.org 2020-12-09T14:06:37Z urn:sha1:a1ef66a76b4a6651b7371a9fd1e35f2f99e85bfa And succeeds if, and only if, the peer certificate SPKI matches one of the pinned digest values. Specifying multiple digest values can key useful in key rollover scenarios and/or when the server supports certificates of different types (for instance RSA+ECDSA).