aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #5193 from jscissr/fix_arcVsevolod Stakhov2024-10-203-10/+23
|\ | | | | [CritFix] Fix ARC-Seal signing
| * [CritFix] Fix ARC-Seal signingJan Schär2024-10-203-10/+23
|/ | | | | | | | | | | | | | | | | Signing of ARC-Seal headers was recently broken; the created signatures failed to validate. Most likely, this was caused by commit 1e661a2fc6e3, which changed the way signatures are created in lua_rsa_sign_memory without adding the calls to EVP_PKEY_CTX_set_rsa_padding and EVP_PKEY_CTX_set_signature_md needed with the new interface. After fixing this, some existing tests failed, because the test values passed to the hash parameter did not have the correct size for a sha256 hash. I fixed these by adjusting the length of the test values. Additionally, I extended the "RSA sign" unit test to compare the created signature against the expected one. This is possible because RSA signing is deterministic, and should prevent the same bug from occuring again. Fixes: https://github.com/rspamd/rspamd/issues/5173
* Merge pull request #5192 from henry-spanka/add-eof-to-openmetricsVsevolod Stakhov2024-10-202-0/+2
|\ | | | | add EOF to openmetrics response in proxy and server
| * add EOF to openmetrics response in proxy and serverHenry Spanka2024-10-182-0/+2
| |
* | Merge pull request #5191 from rspamd/vstakhov-zstd-headersVsevolod Stakhov2024-10-196-243/+253
|\ \ | |/ |/| [Rework] Allow `Content-Encoding` standard header for zstd compression
| * [Rework] Allow `Content-Encoding` standard header for zstd compressionvstakhov-zstd-headersVsevolod Stakhov2024-10-176-243/+253
|/
* [Fix] Restore propagation of spam/ham learnsVsevolod Stakhov2024-10-162-5/+8
|
* Merge pull request #5190 from rspamd/vstakhov-some-build-fixesVsevolod Stakhov2024-10-151-1/+8
|\ | | | | Some more fixes
| * Merge branch 'master' into vstakhov-some-build-fixesVsevolod Stakhov2024-10-150-0/+0
| |\ | |/ |/|
* | Merge pull request #5189 from rspamd/vstakhov-some-build-fixesVsevolod Stakhov2024-10-158-18/+24
|\ \ | | | | | | Some build fixes
| | * [Fix] Load "default" provider as well as "legacy"Vsevolod Stakhov2024-10-151-1/+8
| |/
| * [Minor] Use OSSL_PROVIDER_load on RHEL based distrosvstakhov-some-build-fixesVsevolod Stakhov2024-10-153-3/+11
| |
| * [Minor] Remove bogus DEBIAN_BUILD constantVsevolod Stakhov2024-10-156-15/+13
|/
* Merge pull request #5188 from rspamd/vstakhov-openssl-provider-messageVsevolod Stakhov2024-10-153-19/+56
|\ | | | | [Fix] Do not abort when OpenSSL is broken, report that to a user
| * [Minor] Thank you OpenSSL for all those new namesVsevolod Stakhov2024-10-151-1/+1
| |
| * [Fix] Do not abort when OpenSSL is broken, report that to a uservstakhov-openssl-provider-messageVsevolod Stakhov2024-10-153-19/+56
|/ | | | Issue: #5181
* [Fix] Use unsigned char for ragel machinesVsevolod Stakhov2024-10-141-0/+1
| | | | | | | It seems that on aarch64 Linux char is signed by default, so Ragel produces a wrong code that is "optimized" by a compiler simply to `false`. Issue: #5172
* Revert "[Minor] Remove custom ragel flags to test arm64 bug"Vsevolod Stakhov2024-10-141-0/+5
| | | | This reverts commit 0d962621f158e0b64693e947beecb3242a229fd2.
* [Minor] Fix GCC sanitizerVsevolod Stakhov2024-10-141-1/+1
|
* [Minor] Remove custom ragel flags to test arm64 bugVsevolod Stakhov2024-10-141-5/+0
|
* Merge pull request #5179 from smarsching/issue-5178Vsevolod Stakhov2024-10-101-1/+2
|\ | | | | [Fix] Avoid null-bytes in Log-Tag header value
| * [Fix] Avoid null-bytes in Log-Tag header value.Sebastian Marsching2024-10-081-1/+2
| | | | | | | | This fixes #5178.
* | Merge pull request #5176 from wdhdev/patch-1Vsevolod Stakhov2024-10-091-291/+248
|\ \ | |/ |/| chore(publicsuffix): update effective_tld_names.dat
| * revert IDN removalWilliam Harrison2024-10-081-0/+440
| |
| * chore(publicsuffix): update effective_tld_names.datWilliam Harrison2024-10-071-731/+248
| |
* | Merge pull request #5164 from dragoangel/patch-8Vsevolod Stakhov2024-10-081-1/+0
|\ \ | |/ |/| Remove proxy from url_redirector.conf as it not the option
| * Remove proxy from url_redirector.conf as it not the optionDmitriy Alekseev2024-09-301-1/+0
| |
* | Merge pull request #5167 from rspamd/vstakhov-new-hiredisVsevolod Stakhov2024-10-0526-981/+6527
|\ \ | | | | | | Update hiredis library removing all hacks
| * | [Minor] Update dependencies infovstakhov-new-hiredisVsevolod Stakhov2024-10-011-1/+1
| | |
| * | [Rework] Update hiredis to 1.2.0Vsevolod Stakhov2024-10-0125-980/+6526
| |/
* | Merge pull request #5169 from arkamar/lua-ucl/len-typeVsevolod Stakhov2024-10-021-2/+2
|\ \ | |/ |/| [Fix] Use correct type for keylen in lua_ucl_newindex
| * [Fix] Use correct type for keylen in lua_ucl_newindexPetr Vaněk2024-10-021-2/+2
|/ | | | | | | | | | The keylen variable used in lua_ucl_newindex function should use size_t type instead of lua_Integer, because all functions that use keylen expect it to be of size_t type. This mismatch leads to incompatible pointer types, and modern versions of GCC fail to compile the code. Fixes: 9e87597ceb05 ("[Project] Allow manipulations with opaque UCL objects") Issue: https://github.com/rspamd/rspamd/issues/5163
* [Minor] Update versionVsevolod Stakhov2024-09-301-1/+1
|
* Release 3.10.03.10.0Vsevolod Stakhov2024-09-301-0/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * [Conf] Add SenderScore RPBL return codes * [Conf] Add SenderScore Reputationlist RBL * [Conf] Increase scores for strange things in the archives * [CritFix] The max size for signing key is actually 65 bytes for p256 * [Feature] Add rspamadm secretbox command * [Feature] Add rspamd_cxx_unit_cryptobox for unit testing * [Feature] Add support for OpenSSL 3.0 * [Feature] Add support for OpenSSL 3.0 for DKIM * [Feature] Add tests for rspamd_cryptobox * [Feature] Add tooling to encrypt strings in Lua * [Feature] Allow differen modes for fuzzy rules * [Feature] Allow to set negative group score limit via `min_score` * [Feature] DMARC: Implement reporting.only_domains setting * [Fix] Add workaround for the bug in OpenSSL < 3.0.8 * [Fix] Another fix for Redis schema * [Fix] Another safe-guards for learning/classifying an empty message * [Fix] Apply the same workaround for signing keys * [Fix] Check message before trying to dereference pointer * [Fix] Do not install doctest stuff * [Fix] Encode headers that we send to milter add header * [Fix] Fix DCC `rep` handling * [Fix] Fix Redis scripts uploading when Redis is not ready * [Fix] Fix and rework various parts * [Fix] Fix compatibility with OSSL 1.0 * [Fix] Fix glib internals by setting locale in `rspamc` * [Fix] GPT: Fix bug in condition check * [Fix] Get rid of EVP_PKEY_CTX_set1_rsa_keygen_pubexp * [Fix] Iterate over dynamic keys in fuzzy storage * [Fix] Make tostring in UCL a bit less brain-damaged * [Fix] More bogus sizes fix * [Fix] Preserve the previous behaviour of RDNS_* checks * [Fix] Rework DMARC to correctly handle spaces in DMARC records Issue: #4906 * [Fix] Sign key != encryption key, omg * [Fix] Unify lua symbols registration * [Fix] Use proper keys when doing asymmetric encryption * [Project] Add API method to push unwrapped UCL object * [Project] Add more stuff to transparent UCL * [Project] Add parsing of key limits and expire date * [Project] Add ratelimit parsing for fuzzy keys * [Project] Allow manipulations with opaque UCL objects * [Project] Allow to change log tag from HTTP request * [Project] Implement expiration * [Project] Implement per-key ratelimit * [Project] Move ratelimit parsing stuff to a common library * [Project] Remove NIST (OpenSSL) mode from cryptobox * [Project] Remove NIST mode from everywhere * [Project] Rework ratelimits check * [Project] Some more fixes * [Project] Start support of MIME UTF8 * [Project] Try to allow more transparent access of ucl elements * [Rework] Allow more flexible keypair encoding * [Rework] Breaking: Rewrite cfg transform and remove legacy * [Rework] Change fuzzy error symbols * [Rework] Change the logic of skipping symbols * [Rework] Clean up legacy code * [Rework] Implement new replies logic on the server's side * [Rework] Remove control block support * [Rework] Resolve rdns in a separate function * [Rework] Use __builtin_cpu_supports where possible * [Rework] Use a more straight structure for DKIM keys * [Rules] Fix some old rules
* Merge pull request #5161 from rspamd/vstakhov-fix-dccVsevolod Stakhov2024-09-301-6/+11
|\ | | | | [Fix] Fix DCC `rep` handling
| * [Fix] Fix DCC `rep` handlingvstakhov-fix-dccVsevolod Stakhov2024-09-271-6/+11
|/ | | | Issue: #5158
* [Minor] Make API consistentVsevolod Stakhov2024-09-272-5/+5
|
* [Test] Trying to understand what's up with robotVsevolod Stakhov2024-09-271-0/+2
|
* Merge pull request #5056 from rspamd/vstakhov-utf8-mimeVsevolod Stakhov2024-09-2710-23/+74
|\ | | | | [Feature] MIME UTF8 support
| * Merge branch 'master' into vstakhov-utf8-mimevstakhov-utf8-mimeVsevolod Stakhov2024-09-2420-123/+649
| |\
| * \ Merge branch 'master' into vstakhov-utf8-mimeVsevolod Stakhov2024-09-1714-494/+736
| |\ \
| * \ \ Merge branch 'master' into vstakhov-utf8-mimeVsevolod Stakhov2024-09-053-28/+215
| |\ \ \
| * \ \ \ Merge branch 'master' into vstakhov-utf8-mimeVsevolod Stakhov2024-09-05118-6998/+12065
| |\ \ \ \
| * | | | | [Minor] Disable mime utf by defaultVsevolod Stakhov2024-07-172-3/+3
| | | | | |
| * | | | | [Fix] Encode headers that we send to milter add headerVsevolod Stakhov2024-07-171-2/+9
| | | | | |
| * | | | | [Minor] Simplify condition and add them merely when mime utf is enabledVsevolod Stakhov2024-07-171-9/+13
| | | | | |
| * | | | | [Rules] Fix some old rulesVsevolod Stakhov2024-07-161-7/+10
| | | | | |
| * | | | | [Minor] Add flag for mime utf operationsVsevolod Stakhov2024-07-165-1/+36
| | | | | |
| * | | | | [Minor] Fix grammar ruleVsevolod Stakhov2024-07-151-1/+1
| | | | | |
| * | | | | [Minor] Allow u-labelsVsevolod Stakhov2024-07-151-1/+1
| | | | | |
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-10 01:41:01 +0000