[dovecot/core] 49bf57: auth: passdb imap: Use ssl_client_ca_* settings.

GitHub noreply at github.com
Fri Apr 7 16:30:09 EEST 2017


  Branch: refs/heads/master
  Home:   https://github.com/dovecot/core
  Commit: 49bf57720f56d8f4fbfd2de41c43cbc6bba8a5c4
      https://github.com/dovecot/core/commit/49bf57720f56d8f4fbfd2de41c43cbc6bba8a5c4
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2017-04-07 (Fri, 07 Apr 2017)

  Changed paths:
    M src/auth/passdb-imap.c

  Log Message:
  -----------
  auth: passdb imap: Use ssl_client_ca_* settings.

The args = ssl_ca_dir=.. setting still overrides the ssl_client_ca_dir.


  Commit: 0fab9e25db12d9e0511f91b65c21cbd04f568f8a
      https://github.com/dovecot/core/commit/0fab9e25db12d9e0511f91b65c21cbd04f568f8a
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2017-04-07 (Fri, 07 Apr 2017)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl-context.c

  Log Message:
  -----------
  lib-ssl-iostream: Don't require SSL CA certs if allow_invalid_cert=TRUE

This happened only when verify_remote_cert was also TRUE. But this behavior
now allows verifying the cert without actually requiring it to be valid.


Compare: https://github.com/dovecot/core/compare/4d26a40934ca...0fab9e25db12


More information about the dovecot-cvs mailing list