Commit Briefs

583f078afc Kirill A. Korinsky

Added support of RFC 8617 aka ARC (auth)


7e70468170 Kirill A. Korinsky

Refactoring: use only one ar_state for everything


c455704656 Kirill A. Korinsky

Refactoring: rename dkim_ ~> ar_


645116d4e6 Kirill A. Korinsky

Implementat SPF as it described in RFC 7208


7da80e474c Kirill A. Korinsky

Expose iprev field


2d73ea73b1 Kirill A. Korinsky

Rename to filter-auth


43613b9ec2 Kirill A. Korinsky

Do not treat ar_h_errno == NO_DATA as error (backport)

OpenBSD's asr returns ar_h_errno == NO_DATA when it had a fallback from UDP to TCP, so I should tolerate it as well.


a3ad827f60 Kirill A. Korinsky

Save DNS lookup for failed signatures


884859db3d Kirill A. Korinsky

Abort unfinished DNS query inside free


d8f487e360 Kirill A. Korinsky

DKIM follow CNAME and improve logging.

RFC 6376 doesn't care about CNAME, anyway it exists in real world.


d8c633ea7b Kirill A. Korinsky

Remove useless auth_commit


b8830dff3f Kirill A. Korinsky

System level errors should be fatal


b8704f50a3 Kirill A. Korinsky

Add first up to 8 character of used hedaer.b into AR


801e13dfab Kirill A. Korinsky

prevent dkim_ar_cat from lose last character

It losed the last character when the length resulted string was multiple of 256


09d27b5844 Kirill A. Korinsky

Never swallow an email with malformed AR header


5f9683120e Kirill A. Korinsky

Avoid implicit = in AR parser



5f5f9df0fb Kirill A. Korinsky

Improve serialization of AR header

Here two fixes: (1) avoid loop when checkpoint starts from whitespace, and (2) avoid infintity loop on very long last field.


0379d26667 Kirill A. Korinsky

Never ignore vsnprintf errors


348f2e6357 Kirill A. Korinsky

Fix memory leak


f185a96d0f Kirill A. Korinsky

Never use duplicated header multiple times


7258013668 Martijn van Duren

Revert previous. It's too early to remove the guards just yet. (main)


736df1a6f7 Martijn van Duren

Remove HAVE_ED25519 now that we have ED25519 in LibreSSL


3082f0981a Martijn van Duren

Handle spaces in key-p-tag correctly.

Reported by Mischa Peters.


b8958f33de Martijn van Duren

Make sure osmtpd_ltok_skip_hexdig doesn't derefences NULL