interimap/tests, branch upstream/0.5.3 Fast bidirectional synchronization for QRESYNC-capable IMAP servers New test with a server offering both RSA+ECDSA certificates. 2020-12-09T14:29:59+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-09T14:11:45+00:00 51df40cf82c67ae828c325a42e28b3155fce9864 This requires dovecot-imapd 2.2.31 or later. Certificate generated with: $ openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve \ -out tests/snippets/dovecot/dovecot.ecdsa.key $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \ -key tests/snippets/dovecot/dovecot.ecdsa.key \ -out tests/snippets/dovecot/dovecot.ecdsa.crt 
This requires dovecot-imapd 2.2.31 or later.

Certificate generated with:

      $ openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve \
            -out tests/snippets/dovecot/dovecot.ecdsa.key
      $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
            -key tests/snippets/dovecot/dovecot.ecdsa.key \
            -out tests/snippets/dovecot/dovecot.ecdsa.crt
libinterimap: SSL_fingerprint now supports a space-separate list of digests to pin. 2020-12-09T14:29:54+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-09T14:06:37+00:00 a1ef66a76b4a6651b7371a9fd1e35f2f99e85bfa And succeeds if, and only if, the peer certificate SPKI matches one of the pinned digest values. Specifying multiple digest values can key useful in key rollover scenarios and/or when the server supports certificates of different types (for instance RSA+ECDSA). 
And succeeds if, and only if, the peer certificate SPKI matches one of
the pinned digest values.  Specifying multiple digest values can key
useful in key rollover scenarios and/or when the server supports
certificates of different types (for instance RSA+ECDSA).
test suite: use a RSA certificate rather than ECDSA. 2020-12-09T13:57:11+00:00 Guilhem Moulin guilhem@fripost.org 2020-12-09T13:57:11+00:00 b13c9fa6f442f555af65f869b954935dae40fcc4 It's arguably the most common use-case. Generated with $ openssl genpkey -algorithm RSA -out tests/snippets/dovecot/dovecot.rsa.key $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \ -key tests/snippets/dovecot/dovecot.rsa.key \ -out tests/snippets/dovecot/dovecot.rsa.crt 
It's arguably the most common use-case.  Generated with

  $ openssl genpkey -algorithm RSA -out tests/snippets/dovecot/dovecot.rsa.key
  $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
        -key tests/snippets/dovecot/dovecot.rsa.key \
        -out tests/snippets/dovecot/dovecot.rsa.crt
Upgrade URLs to secure HTTP. 2020-08-04T00:35:05+00:00 Guilhem Moulin guilhem@fripost.org 2020-08-04T00:35:05+00:00 11cd204852f665670b5d4271eab86a3d9f5e5624 






libinterimap: abort on PREAUTH greeting received on plaintext connections
2020-08-03T18:50:08+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T18:27:38+00:00

3b2939febdeb7f92051f95a3b08cf86e221ce21d

Set "STARTTLS = NO" to ignore.  This is similar to CVE-2020-12398 and
CVE-2020-14093.





Set "STARTTLS = NO" to ignore.  This is similar to CVE-2020-12398 and
CVE-2020-14093.







libinterimap: Fix response injection vulnerability after STARTTLS.
2020-08-03T18:30:46+00:00

Guilhem Moulin
guilhem@fripost.org

2020-08-03T17:20:05+00:00

bc43c0d9468a8d50ba141c8a965f9f07ed0456ff

For background see https://gitlab.com/muttmua/mutt/-/issues/248 .





For background see https://gitlab.com/muttmua/mutt/-/issues/248 .







Makefile: Major refactoring, add install and uninstall targets.
2020-07-01T22:14:39+00:00

Guilhem Moulin
guilhem@fripost.org

2020-07-01T20:41:28+00:00

a1c089b997ebf705a9023b4f0f97327e5bd2814e

Honor BUILD_DOCDIR and DESTDIR variables.

Also, remove the `use lib` statement from our executables.





Honor BUILD_DOCDIR and DESTDIR variables.

Also, remove the `use lib` statement from our executables.







pullimap: Also compare RFC 5322 date and envelope information in mailbox comparison tests.
2020-07-01T22:14:35+00:00

Guilhem Moulin
guilhem@fripost.org

2020-07-01T19:26:23+00:00

1507128fcca36093ea9f544e8a44adca5d514605












tests/run: Don't redirect stderr by process substitution.
2019-12-15T02:39:04+00:00

Guilhem Moulin
guilhem@fripost.org

2019-12-15T02:38:59+00:00

49d7a90c159b12173ce202fb9b101465b87da96c

This seems to cause timing issues.





This seems to cause timing issues.







tests/*/t: Increase timeout from 2 to 5s after background syncs.
2019-12-15T02:35:51+00:00

Guilhem Moulin
guilhem@fripost.org

2019-12-15T02:35:51+00:00

a7517e35cf0c835fcb68db56d8634fab9b4d5f0d