Skip to content

Version 0.87

Compare
Choose a tag to compare
@philpennock philpennock released this 04 Dec 02:07

Version 0.87 of sieve-connect is now available. This is a "time has passed" release, with one contributed new feature and various cleanups.

This adds a new --tlscertfingerprint option, which permits "certificate pinning" for the sieve server, in a crude but effective way. In doing this, we now explicitly require Net::SSLeay of at least version 1.37. This makes sieve-connect incompatible with stock Debian Wheezy (oldstable) and with RHEL6.

My thanks to Lukas S (https://github.com/lukas227) for this feature.

Diagnostics around port numbers, and relevant documentation, has been cleaned up to be much clearer about the interaction with /etc/services and to be clear that /etc/services takes precedence. My thanks to Daniel Schulte for his patience as he encountered issues arising from my
unclear diagnostic messages.

We now honour the $SSL_CERT_DIR and $SSL_CERT_FILE environment variables, which are common to C language clients of OpenSSL (but which are blocked by the Perl bindings, so we now reimplement the support manually).

The documentation is a bit less patronising and has been brushed up to correctly reference all relevant environment variables, etc.

Full ChangeLog at:
http://people.spodhuis.org/phil.pennock/software/sieve-connect.ChangeLog.txt

The software can be downloaded from:

Checksums:

SHA256(sieve-connect-0.87.tar.bz2)= e3de80ab34994de0277fc7bf53b7c08e82db1a1f2762ddac4311d8191cea6c49
SHA256(sieve-connect-0.87.tar.bz2.asc)= b9fff441c76f720a07c98550deadf96fbd8e42131c5b3ec00df52626d73f12a7

SHA3-224(sieve-connect-0.87.tar.bz2)= 037d7a1c09b6802afc78ecfbd81f7306e776574a70d9393a0014ab68
SHA3-224(sieve-connect-0.87.tar.bz2.asc)= 3cef5614972f21132175250f36a660bd072ba397f9fd80aadaa301cb

Finally, administrivia: I expect future releases (and announcements) to be signed with a new PGP key 0x4D1E900E14C1CC04 which is now in the Strong Set of keys.

Regards,
-Phil