lib-ssl-iostream: Fix premature NULL deref Broken in 4836d541b1c1354073e068aabe5cd92aa67fe61d Found by coverity

ssl-iostream: ssl_iostream_destroy(NULL) should be a no-op

Updated copyright notices to include the year 2018.

lib-ssl-iostream: Add accessors for additional SSL protocol details This is needed in order to send these details as fields to auth process

Replace ssl_protocols config option with ssl_min_protocol Default to TLSv1.

lib-ssl-iostream: Simplify ssl_iostream_settings_equals()

lib-ssl-iostream: Call ssl_iostream_context_cache_free() automatically at exit

lib-ssl-iostream: Add io_stream_ssl_global_init()

lib-ssl-iostream: io_stream_create_ssl_client() - Move code to set verify_remote_cert=TRUE Enable it in the generic SSL code instead of OpenSSL-specific code.

lib-ssl-iostream: Add TLS SNI callback and a way to change SSL context

lib-ssl-iostream: ssl_iostream_cert_match_name() - add reason_r parameter The callers were also changed to add the reason to error messages.

lib-ssl-iostream: ssl_iostream_cert_match_name() - Change to return bool The return value makes much more sense as a boolean TRUE/FALSE than 0/-1.

lib-ssl-iostream: Add ssl_iostream_settings_drop_stream_only()

lib-ssl-iostream: Add ssl_iostream_settings_equals()

lib-ssl-iostream: Add refcounting to ssl_iostream_context

global: Rename ssl_iostream_context_deinit() to ssl_iostream_context_unref()

lib-ssl-iostream: ssl_iostream_settings_dup() - rewrite using string offsets array This array will be useful for other purposes as well.

lib-ssl-iostream: Add ssl_iostream_settings_init_from() This allows duplicating settings to an already existing struct without having to allocate it.

lib-ssl-iostream: ssl_iostream_settings_dup() - duplicate also dh

lib-ssl-iostream: Expose ssl_module_load We need to load SSL module before we chroot in login-common.

lib-ssl-iostream: Add get_compression accessor This is needed by login-common

lib-ssl-iostream: Add alternate certificate support

global: Splice cert into separate struct from iostream_ssl_settings

lib-ssl-iostream: Ensure verify_remote_cert is true Forgotten in 38424b8081a75be3ef93729fed4d30dbafca5885

ssl: add ssl_curve_list setting for selecting ECHDE curves

Updated copyright notices to include the year 2017.

global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro. Used the following script: C_FILES=`git ls-files *.c` H_FILES=`git ls-files *.h` for F in "$C_FILES $H_FILES"; do echo "$F" perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F done

lib-ssl-iostream: The final fix to make the SSL plugin loading not fail..

lib-ssl-iostream: Fixed OpenSSL module to be actually initialized.

lib-ssl-iostream: Use more standard _init() & _deinit() to initialize SSL plugin This is mainly to make it easier for test programs to link to the plugin directly.

dovecot: Remove ssl-params

lib-ssl-iostream: move ssl_iostream_settings_dup to iostream-ssl.c

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Remove now-unnecessary direct stdlib.h #includes.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

lib-ssl-iostream: Added dh_length parameter to ssl_iostream_generate_params() This is an API change, but nobody was actually using this function.

lib-ssl-iostream: Destroy SSL module later in the atexit-callbacks.

Updated copyright notices to include year 2014.

lib-ssl-iostream: Deinitialization fixes.

lib-ssl-iostream: Added ssl_iostream_has_handshake_failed()

lib-ssl-iostream: Simplified certificate validation. Also give better error messages.

lib-ssl-iostream: Added support for TLS SNI, which caused some API changes.

lib-ssl-iostream: ssl_iostream_set_handshake_callback() API changed. The callback can now return the error message to caller instead of having to log it itself.

lib-ssl-iostream: API changes to return error strings if init() functions fail. This also fixed a couple of broken error handlings.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.