[dovecot/core] 1a4300: lib-ssl-iostream: Always fall back to default CAs ...

GitHub noreply at github.com
Thu Sep 27 13:00:08 EEST 2018


  Branch: refs/heads/master
  Home:   https://github.com/dovecot/core
  Commit: 1a4300bb279b2c2d125029198f8372441644e833
      https://github.com/dovecot/core/commit/1a4300bb279b2c2d125029198f8372441644e833
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2018-09-27 (Thu, 27 Sep 2018)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl-context.c

  Log Message:
  -----------
  lib-ssl-iostream: Always fall back to default CAs for client contexts

When creating a client context, we always try to load the default
CA, if no CA settings have been provided. This makes it also possible
to allow invalid certs without specifying ssl_client_ca settings,
and also makes dovecot trust system store by default for outgoing
connections.


  Commit: 250902f63e790a123416e14285939dc9361b3e35
      https://github.com/dovecot/core/commit/250902f63e790a123416e14285939dc9361b3e35
  Author: Aki Tuomi <aki.tuomi at dovecot.fi>
  Date:   2018-09-27 (Thu, 27 Sep 2018)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl.c

  Log Message:
  -----------
  lib-ssl-iostream: If certificate check fails, suggest checking ssl ca settings


Compare: https://github.com/dovecot/core/compare/ab2302b12005...250902f63e79
      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.


More information about the dovecot-cvs mailing list