1 - Walcir Fontanini <walcir@densis.fee.unicamp.br>
2 * tested on Solaris 2.5 and and reported missing "snprintf()"
3 -> was fixed in pfixtls-0.1.2
4 * contributed the script to add fingerprints
7 - Matti Aarnio <matti.aarnio@sonera.fi> (www.zmailer.org)
8 * updated pfixtls_dump to need fewer strcat and strcpy calls.
10 - Cerebus <cerebus@sackheads.org>
11 * Missing variable initialization in client mode enable STARTTLS
12 negotiation even when not wanted.
13 -> fixed in pfixtls-0.2.8
15 - Bodo Moeller <bode@openssl.org>
16 * The SSL connection was not shut down at the end of the session, because
17 SSL_CTX_set_quiet_shutdown() was set. This however did not mean "do a
18 quiet shutdown" but "do not shutdown SSL".
19 -> fixed in pfixtls-0.3.3
21 - Jeff Johnson <jeff@websitefactory.net>
22 * noted that the patch code will not compile with SSL disabled anymore,
23 because a ´#ifdef HAS_SSL #endif´ encapsulation was missing in
24 smtp/smtp_connect.c. This must have been in since the very beginning
25 of client mode support (0.2.x).
28 - Craig Sanders <craig@taz.net.au>
29 * noted that the Received: header does not contain sufficient information
30 whether a client certificate was not requested or not presented.
31 He also reminded me that the session cache must be cleared when
32 experimenting with the setup and certificates, what is not explained
36 - Claus Assmann <ca+tls@esmtp.org>
37 * pointed out that the Received: header logging about the TLS state violated
38 RFC822. The TLS information must be in comment form "(info)".
41 - Wietse Venema <wietse@porcupine.org>
42 * uncounted important suggestions to start the integration into the Postfix
44 * code adjustments in the dict_*() database code to allow easier inclusion
45 and use for session caching, and this is only the beginning :-)
46 -> started reprogramming Postfix/TLS to fit both Wietse's and my
47 requirements as of 0.6.0
49 - Damien Miller <djm@mindrot.org>
50 * Found mismatch between documentation and code with regard to logging.
53 - Deti Fliegl <fliegl@cs.tum.edu>
54 * Provided an initial patch to support SubjectAlternativeName/dNSName