interimap/tests/tls-pin-fingerprint, branch v0.5.7 Fast bidirectional synchronization for QRESYNC-capable IMAP servers test suite: ensure we haven't started speaking IMAP when the SSL/TLS handshake is aborted. 2020-12-13T16:38:07+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-13T16:37:32+00:00 ba9d8af01141a6d5d5b98a0e249c311814b844a6 (Unless STARTTLS is used to upgrade the connection.) 
(Unless STARTTLS is used to upgrade the connection.)
libinterimap: show the matching pinned SPKI in --debug mode. 2020-12-11T10:20:37+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-10T13:28:29+00:00 17b263c49df682fc45f0e50cceb01db4366ad9a7 






libinterimap: SSL_fingerprint now supports a space-separate list of digests to pin.
2020-12-09T14:29:54+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T14:06:37+00:00

a1ef66a76b4a6651b7371a9fd1e35f2f99e85bfa

And succeeds if, and only if, the peer certificate SPKI matches one of
the pinned digest values.  Specifying multiple digest values can key
useful in key rollover scenarios and/or when the server supports
certificates of different types (for instance RSA+ECDSA).





And succeeds if, and only if, the peer certificate SPKI matches one of
the pinned digest values.  Specifying multiple digest values can key
useful in key rollover scenarios and/or when the server supports
certificates of different types (for instance RSA+ECDSA).







test suite: use a RSA certificate rather than ECDSA.
2020-12-09T13:57:11+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T13:57:11+00:00

b13c9fa6f442f555af65f869b954935dae40fcc4

It's arguably the most common use-case.  Generated with

  $ openssl genpkey -algorithm RSA -out tests/snippets/dovecot/dovecot.rsa.key
  $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
        -key tests/snippets/dovecot/dovecot.rsa.key \
        -out tests/snippets/dovecot/dovecot.rsa.crt





It's arguably the most common use-case.  Generated with

  $ openssl genpkey -algorithm RSA -out tests/snippets/dovecot/dovecot.rsa.key
  $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
        -key tests/snippets/dovecot/dovecot.rsa.key \
        -out tests/snippets/dovecot/dovecot.rsa.crt







Test suite: add new tests for SSL/TLS.
2019-11-13T05:23:57+00:00

Guilhem Moulin
guilhem@fripost.org

2019-11-10T04:39:41+00:00

a7c364bf90a4593cfbc7911b1b7536dc66b1c879

SSL connections are accepted on TCP port 10993.  Also, fix STARTTLS
directive, broken since fba1c36…





SSL connections are accepted on TCP port 10993.  Also, fix STARTTLS
directive, broken since fba1c36…