nginx.git/src/mail, branch release-1.6.3

Mail: discard pipelined commands after SMTP STARTTLS.

2014-08-05T08:22:07+00:00

The bug had appeared in nginx 1.5.6 (04e43d03e153).

Reported by Chris Boulton.

Mail: added a check for the number of arguments in MAIL/RCPT.

2014-05-21T17:56:20+00:00

Missed during introduction of the SMTP pipelining support (04e43d03e153,
1.5.6).  Previously, the check wasn't needed as s->buffer was used directly
and the number of arguments didn't matter.

Reported by Svyatoslav Nikolsky.

Mail: fixed ngx_mail_send() (ticket #519).

2014-03-31T17:38:27+00:00

Fixed format specifier in logging of "c->number".

2014-03-06T14:25:59+00:00

Mail: fixed passing of IPv6 client address in XCLIENT.

2014-01-17T18:06:04+00:00

SSL: ssl_session_tickets directive.

2014-01-10T15:12:40+00:00

This adds support so it's possible to explicitly disable SSL Session
Tickets. In order to have good Forward Secrecy support either the
session ticket key has to be reloaded by using nginx' binary upgrade
process or using an external key file and reloading the configuration.
This directive adds another possibility to have good support by
disabling session tickets altogether.

If session tickets are enabled and the process lives for a long a time,
an attacker can grab the session ticket from the process and use that to
decrypt any traffic that occured during the entire lifetime of the
process.

Resolver: implemented IPv6 name to address resolving.

2013-12-09T06:53:28+00:00

Changed resolver API to use ngx_addr_t.

2013-12-06T10:30:27+00:00

SSL: added ability to set keys used for Session Tickets (RFC5077).

2013-10-11T23:05:24+00:00

In order to support key rollover, ssl_session_ticket_key can be defined
multiple times. The first key will be used to issue and resume Session
Tickets, while the rest will be used only to resume them.

    ssl_session_ticket_key  session_tickets/current.key;
    ssl_session_ticket_key  session_tickets/prev-1h.key;
    ssl_session_ticket_key  session_tickets/prev-2h.key;

Please note that nginx supports Session Tickets even without explicit
configuration of the keys and this feature should be only used in setups
where SSL traffic is distributed across multiple nginx servers.

Signed-off-by: Piotr Sikora

Mail: fixed segfault with ssl/starttls at mail{} level and no cert.

2013-09-30T18:10:13+00:00

A configuration like "mail { starttls on; server {}}" triggered NULL
pointer dereference in ngx_mail_ssl_merge_conf() as conf->file was not set.