Commits


Added support of RFC 8617 aka ARC


Refactoring: use only one ar_state for everything


Refactoring: rename dkim_ ~> ar_


Implementat SPF as it described in RFC 7208


Expose iprev field


Rename to filter-auth


Do not treat ar_h_errno == NO_DATA as error OpenBSD's asr returns ar_h_errno == NO_DATA when it had a fallback from UDP to TCP, so I should tolerate it as well.


Save DNS lookup for failed signatures


Abort unfinished DNS query inside free


DKIM follow CNAME and improve logging. RFC 6376 doesn't care about CNAME, anyway it exists in real world.


Remove useless auth_commit


System level errors should be fatal


Add first up to 8 character of used hedaer.b into AR


prevent dkim_ar_cat from lose last character It losed the last character when the length resulted string was multiple of 256


Never swallow an email with malformed AR header


Avoid implicit = in AR parser


Simplified parser of AR header which should improve it's stability on edge cases as well.


Improve serialization of AR header Here two fixes: (1) avoid loop when checkpoint starts from whitespace, and (2) avoid infintity loop on very long last field.


Never ignore vsnprintf errors


Fix memory leak


Never use duplicated header multiple times


Revert previous. It's too early to remove the guards just yet.


Remove HAVE_ED25519 now that we have ED25519 in LibreSSL


Handle spaces in key-p-tag correctly. Reported by Mischa Peters.


Make sure osmtpd_ltok_skip_hexdig doesn't derefences NULL