kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/mail/dkim-milter/PLIST

113 lines
5 KiB
Text
Raw Normal View History

2.8.3 2009/05/31 Close the configuration file after reading it, plugging a descriptor leak. Release memory associated with old configuration nodes (i.e. strings) as well as the nodes themselves. Connect the configuration handle to its allocated data so cleanup can actually be thorough. Fix an error message reported inside _FFR_REPLACE_RULES. Plug a memory leak in mlfi_header() tripped when errors occur. Since ADSP has not yet been registered by IANA, adjust its method label in Authentication-Results accordingly. Include selector, domain and other text if possible when logging key retrieval failures. Add _FFR_SENDER_HEADERS, allowing user control over which header fields are used to make the sign/verify decision and perform key selection. LIBDKIM: Initialize canon_lastchar in dkim_add_canon(). LIBDKIM: Clean up any compiled regular expressions in dkim_close(). LIBDKIM: Fix some type-related compiler warnings.
2010-03-14 17:59:27 +01:00
@comment $NetBSD: PLIST,v 1.12 2010/03/14 16:59:27 pettai Exp $
Convert to use PLIST_VARS instead of manually passing "@comment " through PLIST_SUBST to the plist module.
2008-04-13 00:42:57 +02:00
${PLIST.arlib}lib/libar.a
${PLIST.arlib}man/man3/ar.3
Pull in improvements from wip (packaged by j+pkgsrc (at) salmi.ch): * Install documentation for the library * Install a static version of the dkim library * Move to external options.mk * Add support for ar(3) and debug
2008-03-09 15:02:08 +01:00
lib/libdkim.a
include/dkim.h
Update to 2.5.0 Add "AutoRestartCount" and "AutoRestartRate" configuration parameters to limit runaway restart loops. Feature request #SF1735573: Add "AlwaysAddARHeader" option, which will add an Authentication-Results of "none" for unsigned messages from domains without a "strict" policy. Feature request #SF1807748: Reload the configuration file on receipt of SIGUSR1. Requested by Florian Sager. Feature request #SF1811969: Add _FFR_BODYLENGTH_DB which adds a "BodyLengthDBFile" feature, allowing a per-recipient decision on whether or not to use an "l=" tag when signing. Patch contributed by Daniel Black. Feature request #SF1841955: Add an "Include" facility to the configuration file. Feature request #SF1876941: Make the syslog facility selectable. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1876943: Add _FFR_AUTHSERV_JOBID allowing the job ID to be included as part of the "authserv-id" in Authentication-Results: headers. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1890581: Attempt to clean up a UNIX domain socket in the non-AutoRestart case as well. Requested by Daniel Black. Add "MilterDebug" configuration file option for requesting debugging output from the filter. Add "FixCRLF" configuration file option which activates the DKIM_LIBFLAGS_FIXCRLF flag (see below). Update to draft-ietf-dkim-ssp-03. In doing so, rename the "UseSSPDeny" configuration option to "UseASPDiscard". Handle an error from dkim_getsighdr() properly in mlfi_eom(). When VERIFY_DOMAINKEYS is active, don't short-circuit mlfi_eoh() between dk_verify() and dk_eoh() or a segmentation fault below dk_body() could result. LIBDKIM: Feature request #SF1823059: Export key, signature and policy syntax checking capability via the API. Based on a patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Assert defaults for "c" and "q" tags when parsing signature headers. Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Better handling of truncated DNS replies; instead of just giving up if the "tc" (truncated) bit is set in the reply, see if there was enough of a reply returned to be able to complete the request. LIBDKIM: Fix recycling bug in header canonicalizations which was causing signatures other than the first one to fail in most cases. LIBDKIM: Add new dkim_chunk() interface. LIBDKIM: Enforce DKIM_OPTS_QUERYMETHOD library option even if there were no valid signatures. LIBDKIM: New DKIM_LIBFLAGS_FIXCRLF which requests that "naked" CRs and LFs be converted to CRLFs during canonicalization when signing. LIBDKIM: Fix bounds checking in dkim_canon_selecthdrs(). LIBAR: Eliminate a possible race condition in ar_dispatcher(). LIBAR: Timeouts passed to select() can't be bigger than 10^8. Problem noted by S. Moonesamy of Eland Systems. BUILD: Feature request #SF1876242: Install the filter in EBINDIR and everything else in UBINDIR.
2008-03-09 16:09:26 +01:00
libexec/dkim-filter
Update to 2.4.4 * LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. * Update for latest Authentication-Results: header draft. * Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: * Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. * Fix use of "UseSSPDeny" to include handling of unsigned messages. * Replace "gentxt.csh" with more robust "dkim-genkey" utility. And *lots* more (the package in pkgsrc was 2 years+ old) See RELEASE_NOTES for all the details
2008-02-19 14:23:06 +01:00
bin/dkim-genkey
Fixes for new PLIST magic
2008-04-20 19:36:15 +02:00
${PLIST.stats}bin/dkim-stats
Update to 2.4.4 * LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. * Update for latest Authentication-Results: header draft. * Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: * Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. * Fix use of "UseSSPDeny" to include handling of unsigned messages. * Replace "gentxt.csh" with more robust "dkim-genkey" utility. And *lots* more (the package in pkgsrc was 2 years+ old) See RELEASE_NOTES for all the details
2008-02-19 14:23:06 +01:00
bin/dkim-testkey
bin/dkim-testssp
man/man5/dkim-filter.conf.5
man/man8/dkim-filter.8
man/man8/dkim-genkey.8
Fixes for new PLIST magic
2008-04-20 19:36:15 +02:00
${PLIST.stats}man/man8/dkim-stats.8
Update to 2.4.4 * LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. * Update for latest Authentication-Results: header draft. * Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: * Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. * Fix use of "UseSSPDeny" to include handling of unsigned messages. * Replace "gentxt.csh" with more robust "dkim-genkey" utility. And *lots* more (the package in pkgsrc was 2 years+ old) See RELEASE_NOTES for all the details
2008-02-19 14:23:06 +01:00
man/man8/dkim-testkey.8
man/man8/dkim-testssp.8
Import dkim-milter from pkgsrc. Packaged by iMil. dkim-milter consists of two parts: A milter-based application (dkim-filter) which plugs in to Sendmail to provide DomainKeys Identified Mail service, and a library (libdkim) which can be used to build DKIM-compliant applications or MTAs.
2005-10-27 21:49:07 +02:00
share/doc/dkim-milter/FEATURES
share/doc/dkim-milter/INSTALL
share/doc/dkim-milter/KNOWNBUGS
share/doc/dkim-milter/README
share/doc/dkim-milter/RELEASE_NOTES
Update to 2.4.4 * LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. * Update for latest Authentication-Results: header draft. * Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: * Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. * Fix use of "UseSSPDeny" to include handling of unsigned messages. * Replace "gentxt.csh" with more robust "dkim-genkey" utility. And *lots* more (the package in pkgsrc was 2 years+ old) See RELEASE_NOTES for all the details
2008-02-19 14:23:06 +01:00
share/examples/dkim-milter/dkim-filter.conf.sample
2.8.3 2009/05/31 Close the configuration file after reading it, plugging a descriptor leak. Release memory associated with old configuration nodes (i.e. strings) as well as the nodes themselves. Connect the configuration handle to its allocated data so cleanup can actually be thorough. Fix an error message reported inside _FFR_REPLACE_RULES. Plug a memory leak in mlfi_header() tripped when errors occur. Since ADSP has not yet been registered by IANA, adjust its method label in Authentication-Results accordingly. Include selector, domain and other text if possible when logging key retrieval failures. Add _FFR_SENDER_HEADERS, allowing user control over which header fields are used to make the sign/verify decision and perform key selection. LIBDKIM: Initialize canon_lastchar in dkim_add_canon(). LIBDKIM: Clean up any compiled regular expressions in dkim_close(). LIBDKIM: Fix some type-related compiler warnings.
2010-03-14 17:59:27 +01:00
share/doc/dkim-milter/draft-ietf-dkim-deployment-04.txt
share/doc/dkim-milter/draft-ietf-dkim-overview-12.txt
share/doc/dkim-milter/draft-ietf-dkim-rfc4871-errata-05.txt
share/doc/dkim-milter/draft-ietf-dkim-ssp-10.txt
Update to 2.8.1 2.8.1 2009/01/16 LIBDKIM: Fix bug #SF2508602: Add a translation string for DKIM_SIGERROR_KEYREVOKED and fix dkim_eom_verify() so it returns DKIM_STAT_REVOKED when appropriate. Problem noted by Mike Markley of Bank of America. 2.8.0 2009/01/08 Add configuration option "EnableCoredumps" which makes an explicit kernel request for cores on crashes. Currently only meaningful on Linux. Add configuration option "AuthServID" which sets the "authserv-id" token to use when generating Authentication-Results header fields. Report "fail" instead of "hardfail" on authentication failures, in compliance with the Authentication-Results: draft. Add _FFR_REPORT_INTERVALS, experimental support for the "ri" tag extension to DKIM policy and key records for specifying reporting intervals. Feature request #SF1985886: Add _FFR_MULTIPLE_SIGNATURES, allowing one instance of the filter to add multiple signatures. Suggested by Dave Crocker. Add "TemporaryDirectory" configuration file option for requesting that libdkim use an alternate directory for creating temporary files, and "KeepTemporaryFiles" for requesting that libdkim not delete those files for debugging purposes. Add optional support for the "unbound" asynchronous resolver library as it is DNSSEC-aware. Adds four new configuration file items: "BogusKey", "BogusPolicy", "InsecureKey" and "InsecurePolicy". Also add dkim_sig_getdnssec() and dkim_policy_getdnssec() to libdkim so callers can tell what the DNSSEC evaluation result was for each query. Based on a patch from John Dickinson. Add "BaseDirectory" configuration file option for specifying the desired current directory of the process. Make use of the key and policy "rs" tag, if present, when doing SMTP rejections. Use MTA macro "$j" as the hostname in generated reports instead of the output of gethostname() since on some systems the latter may not be fully-qualified. Remove ANTICIPATE_SENDMAIL_MUNGE, replacing it with a runtime check for the milter v2 feature which suppresses the addition of spaces in headers. Add _FFR_COMMAIZE which attempts to predict the reformatting the MTA will do to certain header fields to reduce verification failures. Add _FFR_DKIM_REPUTATION enabling a function used to query an open DKIM reputation service regarding the signing user and signing domain. The service's URL is http://www.dkim-reputation.org. (EXPERIMENTAL) Fix preloading of configuration defaults. Fix bug #SF2236040: Quote all of the POSIX regular expression special characters, not just some of them. Reported by Mark Martinec. When possible, log the selector and domain of the signature evaluated along with any errors in the libcrypto stack. LIBDKIM: Add "smtpbuf", "smtplen" and "interval" parameters to dkim_sig_getreportinfo() and dkim_policy_getreportinfo(). Also, remove the assertion that "addr" be non-NULL. LIBDKIM: Add DKIM_LIBFLAGS_ACCEPTDK which enables compatibility with DomainKeys-formatted key records. LIBDKIM: Adjust signature formatting for legibility. LIBDKIM: Check return status from dkim_canon_getfinal() to avoid bad dereferences. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Render the DKIM handle unusable in dkim_eoh_sign() if a required header was absent. Activate _FFR_REQUIRED_HEADERS. 2.7.2 2008/09/02 Avoid memory leaks and infinite loops when releasing thread-specific memory. Reported by Jeff Earickson. 2.7.1 2008/08/27 Set up required callbacks for OpenSSL thread-safety. Problem noted by Zbigniew Szalbot. Disallow empty "t=" and "x=" tags. Return DKIM_STAT_KEYFAIL for various DNS key retrieval failures instead of DKIM_STAT_INTERNAL. 2.7.0 2008/07/23 Update to draft-ietf-dkim-ssp-04. In doing so, rename "ASPDiscard" to "ADSPDiscard", "ASPNoSuchDomain" to "ADSPNoSuchDomain" and "SendASPReports" to "SendADSPReports" in the configuration file. Feature request #29738: Add "TrustSignaturesFrom" configuration file item allowing fine-grained control over third-party signature handling. Feature request #SF2018848: Add "LocalADSP" feature allowing policy assertions from domains known to have specific policies but which don't publish ADSP records. Suggested by Bruno Kraychete da Costa. LIBDKIM: Fix an off-by-one overrun check in key and policy record decoding. Problem noted by John Dickinson. 2.6.0 2008/06/11 Remove "signaturemissing" as an old-style configuration action as it has been superseded by "ASPDiscard" and related functions. Add "SendASPReports" configuration option which generates ASP failure reports if requested by the sending domain. Update report generation for verification failures to use the new Abuse Reporting Format (ARF) and DKIM Reporting draft proposals. Add "MustBeSigned" configuration option, requiring signatures to cover specific headers if present. Rename "UseASPDiscard" to "ASPDiscard". Add "ASPNoSuchDomain" configuration option which rejects mail that appears to come from nonexistent domains as reported by the Author Signing Practises check. Add "ReportAddress" configuration option, used for defining the From: header of reports mailed out. Yet another compatibility fix with respect to Sleepycat DB. Fix processing of "LogWhy" configuration parameter. Problem noted by Erik Lotspeich. Add "-n" command line flag which parses the command line arguments and configuration file(s), then exits with an appropriate status code. Report DKIM and ASP results separately via the same Authentication-Results header field. Previous versions would alter the DKIM result based on ASP. Fix bug #SF1976931: Restore function of "nosignature" old-style action configuration, connected to "AlwaysAddARHeader". Problem noted by Lucas Brasilino. Feature request #SF1940233: Add "DontSignMailTo" configuration option, allowing a list of recipient patterns whose mail should not be signed. Requested by Don Hughes. LIBDKIM: Rename dkim_reportinfo() to dkim_sig_getreportinfo(), and add dkim_policy_getreportinfo(). LIBDKIM: Add several more signature error codes covering various key-related errors. LIBDKIM: Add dkim_sig_hdrsigned() utility, DKIM_OPTS_MUSTBESIGNED option, and DKIM_SIGERROR_MBSFAILED error code. LIBDKIM: Fix a bug in the computation of the result for dkim_canon_minbody(). LIBDKIM: Report corrupted base64 chunks instead of quietly tolerating them. LIBDKIM: Tidy up the cleanup code in dkim-canon.c. LIBDKIM: Properly handle "tag=" at the end of a data set (i.e. the tag exists and has an empty value). LIBDKIM: Use larger unsigned data types in dkim_sig_future() as was done elsewhere. LIBDKIM: Always populate a DKIM_SIGINFO with domain and selector before there's an opportunity for other parsing short-circuits. LIBDKIM: Fix bug #SF1984685: Remove the "margin" parameter from dkim_getsighdr(); make it controlled by a new function, dkim_set_margin(), so that the signed copy and the user-requested copy are identical. Activate _FFR_AUTHSERV_JOBID. 2.5.5 2008/04/25 Fix bug #SF1947301: Close up a logic problem in "UseASPDiscard" handling which could cause false rejections of mail from domains advertising "discardable" policies. Problem noted by Doug Kingston. LIBDKIM: Another compatibility fix with respect to Sleepycat DB.
2009-01-20 00:24:28 +01:00
share/doc/dkim-milter/draft-kucherawy-dkim-reporting-04.txt
2.8.3 2009/05/31 Close the configuration file after reading it, plugging a descriptor leak. Release memory associated with old configuration nodes (i.e. strings) as well as the nodes themselves. Connect the configuration handle to its allocated data so cleanup can actually be thorough. Fix an error message reported inside _FFR_REPLACE_RULES. Plug a memory leak in mlfi_header() tripped when errors occur. Since ADSP has not yet been registered by IANA, adjust its method label in Authentication-Results accordingly. Include selector, domain and other text if possible when logging key retrieval failures. Add _FFR_SENDER_HEADERS, allowing user control over which header fields are used to make the sign/verify decision and perform key selection. LIBDKIM: Initialize canon_lastchar in dkim_add_canon(). LIBDKIM: Clean up any compiled regular expressions in dkim_close(). LIBDKIM: Fix some type-related compiler warnings.
2010-03-14 17:59:27 +01:00
share/doc/dkim-milter/draft-shafranovich-feedback-report-07.txt
Update to 2.8.1 2.8.1 2009/01/16 LIBDKIM: Fix bug #SF2508602: Add a translation string for DKIM_SIGERROR_KEYREVOKED and fix dkim_eom_verify() so it returns DKIM_STAT_REVOKED when appropriate. Problem noted by Mike Markley of Bank of America. 2.8.0 2009/01/08 Add configuration option "EnableCoredumps" which makes an explicit kernel request for cores on crashes. Currently only meaningful on Linux. Add configuration option "AuthServID" which sets the "authserv-id" token to use when generating Authentication-Results header fields. Report "fail" instead of "hardfail" on authentication failures, in compliance with the Authentication-Results: draft. Add _FFR_REPORT_INTERVALS, experimental support for the "ri" tag extension to DKIM policy and key records for specifying reporting intervals. Feature request #SF1985886: Add _FFR_MULTIPLE_SIGNATURES, allowing one instance of the filter to add multiple signatures. Suggested by Dave Crocker. Add "TemporaryDirectory" configuration file option for requesting that libdkim use an alternate directory for creating temporary files, and "KeepTemporaryFiles" for requesting that libdkim not delete those files for debugging purposes. Add optional support for the "unbound" asynchronous resolver library as it is DNSSEC-aware. Adds four new configuration file items: "BogusKey", "BogusPolicy", "InsecureKey" and "InsecurePolicy". Also add dkim_sig_getdnssec() and dkim_policy_getdnssec() to libdkim so callers can tell what the DNSSEC evaluation result was for each query. Based on a patch from John Dickinson. Add "BaseDirectory" configuration file option for specifying the desired current directory of the process. Make use of the key and policy "rs" tag, if present, when doing SMTP rejections. Use MTA macro "$j" as the hostname in generated reports instead of the output of gethostname() since on some systems the latter may not be fully-qualified. Remove ANTICIPATE_SENDMAIL_MUNGE, replacing it with a runtime check for the milter v2 feature which suppresses the addition of spaces in headers. Add _FFR_COMMAIZE which attempts to predict the reformatting the MTA will do to certain header fields to reduce verification failures. Add _FFR_DKIM_REPUTATION enabling a function used to query an open DKIM reputation service regarding the signing user and signing domain. The service's URL is http://www.dkim-reputation.org. (EXPERIMENTAL) Fix preloading of configuration defaults. Fix bug #SF2236040: Quote all of the POSIX regular expression special characters, not just some of them. Reported by Mark Martinec. When possible, log the selector and domain of the signature evaluated along with any errors in the libcrypto stack. LIBDKIM: Add "smtpbuf", "smtplen" and "interval" parameters to dkim_sig_getreportinfo() and dkim_policy_getreportinfo(). Also, remove the assertion that "addr" be non-NULL. LIBDKIM: Add DKIM_LIBFLAGS_ACCEPTDK which enables compatibility with DomainKeys-formatted key records. LIBDKIM: Adjust signature formatting for legibility. LIBDKIM: Check return status from dkim_canon_getfinal() to avoid bad dereferences. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Render the DKIM handle unusable in dkim_eoh_sign() if a required header was absent. Activate _FFR_REQUIRED_HEADERS. 2.7.2 2008/09/02 Avoid memory leaks and infinite loops when releasing thread-specific memory. Reported by Jeff Earickson. 2.7.1 2008/08/27 Set up required callbacks for OpenSSL thread-safety. Problem noted by Zbigniew Szalbot. Disallow empty "t=" and "x=" tags. Return DKIM_STAT_KEYFAIL for various DNS key retrieval failures instead of DKIM_STAT_INTERNAL. 2.7.0 2008/07/23 Update to draft-ietf-dkim-ssp-04. In doing so, rename "ASPDiscard" to "ADSPDiscard", "ASPNoSuchDomain" to "ADSPNoSuchDomain" and "SendASPReports" to "SendADSPReports" in the configuration file. Feature request #29738: Add "TrustSignaturesFrom" configuration file item allowing fine-grained control over third-party signature handling. Feature request #SF2018848: Add "LocalADSP" feature allowing policy assertions from domains known to have specific policies but which don't publish ADSP records. Suggested by Bruno Kraychete da Costa. LIBDKIM: Fix an off-by-one overrun check in key and policy record decoding. Problem noted by John Dickinson. 2.6.0 2008/06/11 Remove "signaturemissing" as an old-style configuration action as it has been superseded by "ASPDiscard" and related functions. Add "SendASPReports" configuration option which generates ASP failure reports if requested by the sending domain. Update report generation for verification failures to use the new Abuse Reporting Format (ARF) and DKIM Reporting draft proposals. Add "MustBeSigned" configuration option, requiring signatures to cover specific headers if present. Rename "UseASPDiscard" to "ASPDiscard". Add "ASPNoSuchDomain" configuration option which rejects mail that appears to come from nonexistent domains as reported by the Author Signing Practises check. Add "ReportAddress" configuration option, used for defining the From: header of reports mailed out. Yet another compatibility fix with respect to Sleepycat DB. Fix processing of "LogWhy" configuration parameter. Problem noted by Erik Lotspeich. Add "-n" command line flag which parses the command line arguments and configuration file(s), then exits with an appropriate status code. Report DKIM and ASP results separately via the same Authentication-Results header field. Previous versions would alter the DKIM result based on ASP. Fix bug #SF1976931: Restore function of "nosignature" old-style action configuration, connected to "AlwaysAddARHeader". Problem noted by Lucas Brasilino. Feature request #SF1940233: Add "DontSignMailTo" configuration option, allowing a list of recipient patterns whose mail should not be signed. Requested by Don Hughes. LIBDKIM: Rename dkim_reportinfo() to dkim_sig_getreportinfo(), and add dkim_policy_getreportinfo(). LIBDKIM: Add several more signature error codes covering various key-related errors. LIBDKIM: Add dkim_sig_hdrsigned() utility, DKIM_OPTS_MUSTBESIGNED option, and DKIM_SIGERROR_MBSFAILED error code. LIBDKIM: Fix a bug in the computation of the result for dkim_canon_minbody(). LIBDKIM: Report corrupted base64 chunks instead of quietly tolerating them. LIBDKIM: Tidy up the cleanup code in dkim-canon.c. LIBDKIM: Properly handle "tag=" at the end of a data set (i.e. the tag exists and has an empty value). LIBDKIM: Use larger unsigned data types in dkim_sig_future() as was done elsewhere. LIBDKIM: Always populate a DKIM_SIGINFO with domain and selector before there's an opportunity for other parsing short-circuits. LIBDKIM: Fix bug #SF1984685: Remove the "margin" parameter from dkim_getsighdr(); make it controlled by a new function, dkim_set_margin(), so that the signed copy and the user-requested copy are identical. Activate _FFR_AUTHSERV_JOBID. 2.5.5 2008/04/25 Fix bug #SF1947301: Close up a logic problem in "UseASPDiscard" handling which could cause false rejections of mail from domains advertising "discardable" policies. Problem noted by Doug Kingston. LIBDKIM: Another compatibility fix with respect to Sleepycat DB.
2009-01-20 00:24:28 +01:00
share/doc/dkim-milter/libdkim/dkim_dnssec.html
share/doc/dkim-milter/libdkim/dkim_policy_getdnssec.html
share/doc/dkim-milter/libdkim/dkim_policy_getreportinfo.html
share/doc/dkim-milter/libdkim/dkim_set_margin.html
share/doc/dkim-milter/libdkim/dkim_sig_getdnssec.html
share/doc/dkim-milter/libdkim/dkim_sig_getreportinfo.html
share/doc/dkim-milter/libdkim/dkim_sig_hdrsigned.html
Pull in improvements from wip (packaged by j+pkgsrc (at) salmi.ch): * Install documentation for the library * Install a static version of the dkim library * Move to external options.mk * Add support for ar(3) and debug
2008-03-09 15:02:08 +01:00
share/doc/dkim-milter/libdkim/dkim.html
share/doc/dkim-milter/libdkim/dkim_alg_t.html
share/doc/dkim-milter/libdkim/dkim_body.html
share/doc/dkim-milter/libdkim/dkim_canon_t.html
share/doc/dkim-milter/libdkim/dkim_cbstat.html
share/doc/dkim-milter/libdkim/dkim_close.html
share/doc/dkim-milter/libdkim/dkim_eoh.html
share/doc/dkim-milter/libdkim/dkim_eom.html
share/doc/dkim-milter/libdkim/dkim_flush_cache.html
share/doc/dkim-milter/libdkim/dkim_free.html
share/doc/dkim-milter/libdkim/dkim_get_user_context.html
share/doc/dkim-milter/libdkim/dkim_getcachestats.html
share/doc/dkim-milter/libdkim/dkim_getdomain.html
share/doc/dkim-milter/libdkim/dkim_geterror.html
share/doc/dkim-milter/libdkim/dkim_getmode.html
share/doc/dkim-milter/libdkim/dkim_getpolicystr.html
share/doc/dkim-milter/libdkim/dkim_getpresult.html
share/doc/dkim-milter/libdkim/dkim_getpresultstr.html
share/doc/dkim-milter/libdkim/dkim_getresultstr.html
share/doc/dkim-milter/libdkim/dkim_getsighdr.html
share/doc/dkim-milter/libdkim/dkim_getsiglist.html
share/doc/dkim-milter/libdkim/dkim_getsignature.html
share/doc/dkim-milter/libdkim/dkim_header.html
share/doc/dkim-milter/libdkim/dkim_init.html
share/doc/dkim-milter/libdkim/dkim_lib.html
share/doc/dkim-milter/libdkim/dkim_minbody.html
share/doc/dkim-milter/libdkim/dkim_ohdrs.html
share/doc/dkim-milter/libdkim/dkim_options.html
share/doc/dkim-milter/libdkim/dkim_param_t.html
share/doc/dkim-milter/libdkim/dkim_policy.html
share/doc/dkim-milter/libdkim/dkim_policy_t.html
share/doc/dkim-milter/libdkim/dkim_presult.html
share/doc/dkim-milter/libdkim/dkim_pstate.html
share/doc/dkim-milter/libdkim/dkim_query_t.html
share/doc/dkim-milter/libdkim/dkim_set_dns_callback.html
share/doc/dkim-milter/libdkim/dkim_set_final.html
share/doc/dkim-milter/libdkim/dkim_set_key_lookup.html
share/doc/dkim-milter/libdkim/dkim_set_policy_lookup.html
share/doc/dkim-milter/libdkim/dkim_set_prescreen.html
share/doc/dkim-milter/libdkim/dkim_set_signature_handle.html
share/doc/dkim-milter/libdkim/dkim_set_signature_handle_free.html
share/doc/dkim-milter/libdkim/dkim_set_signature_tagvalues.html
share/doc/dkim-milter/libdkim/dkim_set_signer.html
share/doc/dkim-milter/libdkim/dkim_set_user_context.html
share/doc/dkim-milter/libdkim/dkim_sig_getbh.html
share/doc/dkim-milter/libdkim/dkim_sig_getcanonlen.html
share/doc/dkim-milter/libdkim/dkim_sig_getcontext.html
share/doc/dkim-milter/libdkim/dkim_sig_getdomain.html
share/doc/dkim-milter/libdkim/dkim_sig_geterror.html
share/doc/dkim-milter/libdkim/dkim_sig_geterrorstr.html
share/doc/dkim-milter/libdkim/dkim_sig_getflags.html
share/doc/dkim-milter/libdkim/dkim_sig_getkeysize.html
share/doc/dkim-milter/libdkim/dkim_sig_getselector.html
share/doc/dkim-milter/libdkim/dkim_sig_getsignalg.html
share/doc/dkim-milter/libdkim/dkim_sig_getsigntime.html
share/doc/dkim-milter/libdkim/dkim_sig_ignore.html
share/doc/dkim-milter/libdkim/dkim_sig_process.html
share/doc/dkim-milter/libdkim/dkim_sigerror.html
share/doc/dkim-milter/libdkim/dkim_siginfo.html
share/doc/dkim-milter/libdkim/dkim_sigkey_t.html
share/doc/dkim-milter/libdkim/dkim_sign.html
share/doc/dkim-milter/libdkim/dkim_ssl_version.html
share/doc/dkim-milter/libdkim/dkim_stat.html
share/doc/dkim-milter/libdkim/dkim_verify.html
share/doc/dkim-milter/libdkim/index.html
Update to 2.5.0 Add "AutoRestartCount" and "AutoRestartRate" configuration parameters to limit runaway restart loops. Feature request #SF1735573: Add "AlwaysAddARHeader" option, which will add an Authentication-Results of "none" for unsigned messages from domains without a "strict" policy. Feature request #SF1807748: Reload the configuration file on receipt of SIGUSR1. Requested by Florian Sager. Feature request #SF1811969: Add _FFR_BODYLENGTH_DB which adds a "BodyLengthDBFile" feature, allowing a per-recipient decision on whether or not to use an "l=" tag when signing. Patch contributed by Daniel Black. Feature request #SF1841955: Add an "Include" facility to the configuration file. Feature request #SF1876941: Make the syslog facility selectable. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1876943: Add _FFR_AUTHSERV_JOBID allowing the job ID to be included as part of the "authserv-id" in Authentication-Results: headers. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1890581: Attempt to clean up a UNIX domain socket in the non-AutoRestart case as well. Requested by Daniel Black. Add "MilterDebug" configuration file option for requesting debugging output from the filter. Add "FixCRLF" configuration file option which activates the DKIM_LIBFLAGS_FIXCRLF flag (see below). Update to draft-ietf-dkim-ssp-03. In doing so, rename the "UseSSPDeny" configuration option to "UseASPDiscard". Handle an error from dkim_getsighdr() properly in mlfi_eom(). When VERIFY_DOMAINKEYS is active, don't short-circuit mlfi_eoh() between dk_verify() and dk_eoh() or a segmentation fault below dk_body() could result. LIBDKIM: Feature request #SF1823059: Export key, signature and policy syntax checking capability via the API. Based on a patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Assert defaults for "c" and "q" tags when parsing signature headers. Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Better handling of truncated DNS replies; instead of just giving up if the "tc" (truncated) bit is set in the reply, see if there was enough of a reply returned to be able to complete the request. LIBDKIM: Fix recycling bug in header canonicalizations which was causing signatures other than the first one to fail in most cases. LIBDKIM: Add new dkim_chunk() interface. LIBDKIM: Enforce DKIM_OPTS_QUERYMETHOD library option even if there were no valid signatures. LIBDKIM: New DKIM_LIBFLAGS_FIXCRLF which requests that "naked" CRs and LFs be converted to CRLFs during canonicalization when signing. LIBDKIM: Fix bounds checking in dkim_canon_selecthdrs(). LIBAR: Eliminate a possible race condition in ar_dispatcher(). LIBAR: Timeouts passed to select() can't be bigger than 10^8. Problem noted by S. Moonesamy of Eland Systems. BUILD: Feature request #SF1876242: Install the filter in EBINDIR and everything else in UBINDIR.
2008-03-09 16:09:26 +01:00
share/doc/dkim-milter/libdkim/dkim_chunk.html
share/doc/dkim-milter/libdkim/dkim_key_syntax.html
share/doc/dkim-milter/libdkim/dkim_policy_syntax.html
share/doc/dkim-milter/libdkim/dkim_sig_syntax.html
Pull in improvements from wip (packaged by j+pkgsrc (at) salmi.ch): * Install documentation for the library * Install a static version of the dkim library * Move to external options.mk * Add support for ar(3) and debug
2008-03-09 15:02:08 +01:00
share/doc/dkim-milter/libdkim/overview.html
share/doc/dkim-milter/libdkim/rfc2822_mailbox_split.html
share/doc/dkim-milter/rfc4686.txt
share/doc/dkim-milter/rfc4871.txt
share/doc/dkim-milter/rfc5016.txt
2.8.3 2009/05/31 Close the configuration file after reading it, plugging a descriptor leak. Release memory associated with old configuration nodes (i.e. strings) as well as the nodes themselves. Connect the configuration handle to its allocated data so cleanup can actually be thorough. Fix an error message reported inside _FFR_REPLACE_RULES. Plug a memory leak in mlfi_header() tripped when errors occur. Since ADSP has not yet been registered by IANA, adjust its method label in Authentication-Results accordingly. Include selector, domain and other text if possible when logging key retrieval failures. Add _FFR_SENDER_HEADERS, allowing user control over which header fields are used to make the sign/verify decision and perform key selection. LIBDKIM: Initialize canon_lastchar in dkim_add_canon(). LIBDKIM: Clean up any compiled regular expressions in dkim_close(). LIBDKIM: Fix some type-related compiler warnings.
2010-03-14 17:59:27 +01:00
share/doc/dkim-milter/rfc5451.txt
share/doc/dkim-milter/rfc5518.txt
Update to 2.4.4 * LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. * Update for latest Authentication-Results: header draft. * Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: * Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. * Fix use of "UseSSPDeny" to include handling of unsigned messages. * Replace "gentxt.csh" with more robust "dkim-genkey" utility. And *lots* more (the package in pkgsrc was 2 years+ old) See RELEASE_NOTES for all the details
2008-02-19 14:23:06 +01:00
share/examples/rc.d/dkim-filter
Reference in a new issue Copy permalink