src/login-common/ssl-proxy-openssl.c
2009-10-06 Compiling fix for OpenSSL 0.9.7 and older.
2009-09-29 ssl: If given ssl key is for a different cert, give a nicer error message.
2009-09-28 login: ssl_security string now also shows the used compression.
2009-08-11 Fixed openssl malloc() failure check.
2009-08-07 *-login: If OpenSSL fails with malloc failure, log an error.
2009-08-04 ssl_username_from_cert=yes: Don't truncate username, don't allow NULs in it.
2009-04-29 ssl-proxy: Crashfix to previous commit.
2009-04-28 imap/pop3 proxy: Support SSL/TLS connections to remote servers.
2009-04-09 ssl: Don't use mempool_system_clean_*() functions. Just extra work and they've had some problems.
2009-01-13 Check broken ssl-parameters.dat files better and give a better error message when seeing one.
2009-01-06 Updated copyright notices to include year 2009.
2008-10-19 Login process: Log auth failure reasons better in disconnect message.
2008-10-05 Log a better error message if ssl_cert_file doesn't point to a valid certificate.
2008-08-30 login_log_format_elements: Added %k to show SSL protocol/cipher information.
2008-06-20 Added more consts, ATTR_CONSTs and ATTR_PUREs.
2008-05-07 If SSL function fails and there are no errors, return "Unknown error"
2008-05-05 Free OpenSSL memory at deinit.
2008-03-08 If TLS connection closes with anything except a clean disconnection, log the
2008-03-05 Call SSL_shutdown()
2008-01-06 Replaced clients hash with a linked list.
2008-01-01 Updated copyright notices to include year 2008.
2007-09-25 Don't return void values from void functions.
2007-09-22 Renamed hash_size() -> hash_count().
2007-09-16 Replaced my Copyright notices. The year range always ends with 2007 now.
2007-09-16 Renamed strocpy() to i_strocpy().
2007-09-16 hash_destroy() and hash_iterate_deinit() now take ** pointer.
2007-09-16 Renamed __attr_*__ to ATTR_*. Renamed __attrs_used__ to ATTRS_DEFINED.
2007-09-09 Added ssl_cert_username_field setting.
2007-04-06 Send list of CA names to client when using ssl_verify_client_cert=yes.
2007-03-18 Make OpenSSL memory allocations go through system_clean_pool.
2007-03-18 Set login process's default_pool to system_clean_pool. Changed some
2007-03-15 Replace some string literals with non-const static buffers to avoid compiler
2006-12-15 Replaced void *context from a lot of callbacks with the actual context
2006-11-18 Call ssl_step() at startup instead of ssl_handshake(). If the first input
2006-11-08 Don't bother logging "syscall failed: EOF" messages. No-one cares about
2006-10-16 Don't allow SSLv2 by default.
2006-10-16 Updates to ssl_ca_file and ssl_username_from_cert comments in
2006-10-13 New asserts / cleanup
2006-08-16 If SSL/TLS handshake didn't finish, show "TLS handshaking" instead of "TLS"
2006-08-07 Don't crash if SSL is disabled.
2006-08-06 Minor cleanup, but more importantly last commit message didn't say that the
2006-08-06 Fixes to login process handling, especially with
2006-07-24 Use SSL_pending() to figure out if we should call SSL_read() again.
2006-07-24 Don't constantly re-read ssl-parameters.dat. Make sure that in input handler
2006-07-02 Second try with SSL proxy rewrite. Did some fixes since last try.
2006-07-02 If verbose_ssl=yes set ssl_info_callback and print any alerts and BIO
2006-06-16 Updates to ssl_verify_client_cert: Check CRLs. If auth_verbose=yes, log
2006-04-04 Reverted back for now.
2006-04-02 Rewrite. Hopefully works better.
2006-01-29 Call io_remove() before closing the fd. It's required by kqueue.
2006-01-15 Added support for password protected SSL private keys. The password can be
2006-01-15 Generate DH parameters and use them. Changed default regeneration time to 1
2006-01-14 deinit, unref, destroy, close, free, etc. functions now take a pointer to
2006-01-13 Added "bool" type and changed all ints that were used as booleans to bool.
2005-10-01 Added ssl_username_from_cert setting. Not actually tested yet..
2005-09-18 Don't require private key to be RSA
2005-09-18 Cork/uncork the SSL socket when writing. Reduces latency a lot.
2004-10-01 Show clear error messages if --ssl is tried to be used but it's not
2004-09-15 Compiler warning fixes and cleanups
2004-07-18 SSL proxy was destroyed after login instead of staying in background.