Home | Back
2012-01-09 Version 1.0.7rc1 released
----------------------------------------
      * all files
Update RFC references - many have progressed along the standards track.

      * smtp-auth.c, smtp-tls.c
Added code to use libgsasl.

      * configure.ac
Added --enable-deprecated-features.
Added check for libgsasl

2010-08-10 Stable Version 1.0.6 released
----------------------------------------
2010-08-10 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c
Each component matched by match-domain() is either a single '*' which
matches anything or a case-insensitive comparison with a string of
alphanumeric characters or a '-'.  This is more restrictive than
RFC 2818 appears to allow and replaces the previous match which was
supposed to allow multiple wildcards but which just didn't work.
Revised check_acceptable_security() to check subjectAltName falling
back to commonName only if subjectAltName is not available.

1.0.5 never released
--------------------
2006-10-31 Brian Stafford <brian@stafford.uklinux.net>

      * protocol.c
The Gmail server reports enhanced status codes but then fails to
provide them in some cases.  The parser is now tolerant of this but
warns the application using a new event flag SMTP_EV_SYNTAXWARNING
that it is progressing despite the syntax error.

      * headers.c
Fixed bug where To, Cc, Bcc etc. accepted only single values instead
of a list.
The comparison on the return value of gettimeofday() was reversed.

2005-12-16 Stable Version 1.0.4 released
----------------------------------------
2005-12-16 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
Replaced static counter used when generating the default Message-Id
header with getpid() to minimise the risk of 2 processes generating
the same Message-Id.  If the platform provides gettimeofday() this is
used to further reduce the possibility of collision.
Thanks to Dmitry Maksyoma <dmaks@esphion.com> for spotting this and
suggesting the fix.

      * Makefile.am */Makefile.am
Replace CFLAGS with AM_CFLAGS to silence warning from automake.

      * Makefile.am COPYING COPYING.LIB
Fixed the names of the files with the GPL and LGPL.  It seems
the LGPL version of COPYING got zapped by autoconf at some time
in the past.

2005-08-29 Brian Stafford <brian@stafford.uklinux.net>
      * acinclude.m4
Fix underquoted definition of ACX_WHICH_GETHOSTBYNAME_R.  Thanks
to Matthias Andree <matthias.andree@gmx.de>.

2005-07-25 Brian Stafford <brian@stafford.uklinux.net>
      * errors.c
Added #ifdefs for some of the EAI_ constants used by getaddrinfo()
which are not defined by OSX.
Thanks to Thomas Deselaers <deselaers@gmail.com>

2005-07-21 Brian Stafford <brian@stafford.uklinux.net>
      * acinclude.m4
Fix cross compiling issue when detecting snprintf as suggested by
Chris Richards <Chris.Richards@red-m.com>

2005-07-02 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-api.c
Plug memory leaks in smtp_destroy_session() and smtp_set_server().
Thanks to Bas ten Berge <sam.ten.berge@hccnet.nl> for report and patch.
Also reported by Heikki Lindholm <heikki.lindholm@ipnetworks.fi>

2005-02-03 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
exts was set with the wrong flag (DSN) when checking if CHUNKING
is a required extension.

2004-07-16 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c
Applied OpenSSL patch from Pawel Salek when checking subjectAltName.

2004-04-20 Stable Version 1.0.3 released
----------------------------------------
2004-04-20 Brian Stafford <brian@stafford.uklinux.net>
      * memrchr.c configure.in
Added memrchr() implementation for systems that don't have one.

      * smtp-tls.c
Applied patches from Pawel Salek to check subjectAltName for
wildcarded domain name when validating server certificate.


2004-01-06 Stable Version 1.0.2 released
--------------------------------------
2003-12-01 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c examples/mail-file.c
Applied patch from Pawel Salek.

      * smtp-tls.c
        Fixed typo in check_file() which prevented it from doing quite
the right thing.
The domain name check for the server certificate is now implemented
using the wildcard match described in RFC 2818.
Check_file() and check_directory() return different values for
unusable vs absent files.

2003-09-12 Stable Version 1.0.1 released
--------------------------------------
2003-09-11 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-auth.c smtp-bdat.c smtp-etrn.c smtp-tls.c
More thoroughly check return value from read_smtp_response().

      * libesmtp.h errors.c
        Added new "Client error" error code.  This is just a cop-out,
        used when an API called by libesmtp fails.

      * base64.c
Make conversions immune to NULL source data,

      * examples/mail-file.c
Cleaned up some compiler warnings

2003-09-02 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.[hc]
Added a few extra sio_ calls.  Not actually used in libESMTP though.

2003-07-29 Brian Stafford <brian@stafford.uklinux.net>
      * concatenate.c errors.c getaddrinfo.c headers.c htable.c
      * protocol.c siobuf.c
Don't perform zero length operations using the memxxx() functions.
This may avoid segfaults on some platforms or libraries.

      * siobuf.c
        Improved handling of flushes in sio_write() particularly in the
        case where data would exactly fill remaining space in the buffer.

2003-07-27 Brian Stafford <brian@stafford.uklinux.net>
      * rfc2822date.c
Correct leap year compensation for January and February in
libesmtp_mktime().

2003-07-27 Brian Stafford <brian@stafford.uklinux.net>
      * examples/Makefile
Changed compiler flags from -ansi to -std=c99 and added -W

2003-03-04 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
Eliminated bug where find_header() could pass -1 to the length
argument of memchr() causing a core dump on some architectures.

2003-02-26 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp-private.h protocol.c smtp-bdat.c
M$ Exchange does not accept a chunk size of 0 in BDAT 0 LAST as
explicitly permitted by RFC 3030, *sigh*.  Hackish workaround
implemented.

2003-01-27 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in Makefile.am
Added DIST_SUBDIRS macro to make sure tarball gets built properly.
This one slipped past 'make distcheck' last time for some reason
but then autoconf & friends are totally inscruitable.

      * ntlm/ntlmdes.c
        OpenSSL 0.9.7 changes some typedefs.  Changed to suit, should
        still be compatible with previous OpenSSL versions.

2002-11-09 Stable Version 1.0 released
--------------------------------------
2002-11-09 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
       All version 1.0 features enabled by default.
--enable-isoc now sets -std=c99 instead of -ansi

      * headers.c
Added missing check for NULL pointer in destroy_header_table.
Reversed order of freeing header structures and hash table to
avoid referencing freed memory. (Wally Yau)

2002-06-24 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-etrn.c
Compilation fails with `./configure --enable-more-warnings=picky
--disable-etrn'.  Added missing __attribute__ ((unused)) markers
to offending function arguments to avoid this.

2002-06-24 Version 1.0rc1 released
----------------------------------
2002-06-24 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in Makefile.am protocol.c protocol-states.h
      * smtp-api.c smtp-bdat.c libesmtp.h libesmtp-private.h
        Added experimental support for the SMTP CHUNKING extension.

      * configure.in
Enable non-standard AUTH= response by default.

2002-05-31 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c libesmtp.h libesmtp-private.h
       Added API call to permit protocol timeouts to be set.

      * ntlm/ntlmstruct.c
        Replaced use of byteswap.h and bswap_{16,32} with locally defined
        functions.

2002-04-24 Version 0.8.12 released
----------------------------------
2002-03-14 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
Setting Hdr_PROHIBIT did not work properly.  Thanks to Ronald
F. Guilmette for pointing this out.

2002-03-13 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c libesmtp.h configure.in
       Revoked deprecated status from smtp_option_require_all_recipients
       and remove the corresponding --enable-require-all-recipients
       parameter to configure.

2002-03-07 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp.h libesmtp-private.h protocol.c smtp-tls.c
       RFC 2487 is obsoleted by RFC 3207.  Updated references.

      * protocol.c
       The check for required STARTTLS was omitted when processing the
       HELO command.  If a server did not implement EHLO the session
       would proceed instead of quitting.  Check added and the event
       callback added to report the missing extension to the
       application.

2002-03-06 Version 0.8.11 released
----------------------------------

2002-03-04 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
        Fix buffer overflow problem in read_smtp_response.  This
        overflow could be exploited by a malicious SMTP server to
        overwrite the stack and hence a carefully crafted response could
        cause arbitrary code to be executed.  Also took the opportunity
        to add a related check for a potential DoS attack which makes
        use of excessively long SMTP responses.  Thanks to Colin Phipps
        for detecting this.

      * concatenate.[ch]
        New function cat_shrink to shrink-wrap the allocated buffer.

      * libesmtp.h errors.c
        New unterminated response error code and description.

      * ntlm/ntlmstruct.c configure.in crammd5/md5.h
        stdint.h does not yet seem to be widely available causing
        compilation to fail on some platforms.  Changed uint{16,32}_t to
        unsigned{16,32}_t, detect correct sizes with autoconf and added
        typedefs in ntlmstruct.c.  Changed detection types from int to
        unsigned int in configure.in and made corresponding changes in
        crammd5/md5.h.  Thanks to Ronald F. Guilmette for spotting this.


2002-02-12 Brian Stafford <brian@stafford.uklinux.net>
      * strcasecmp.c strncasecmp.c
       These now return the correct sign of result for differing strings.

2002-01-30 Version 0.8.10p1 released
------------------------------------

2002-01-29 Brian Stafford <brian@stafford.uklinux.net>
      * ntlm/Makefile.am
Added ntlm.h to list of sources.  This omission stopped 0.8.10
form building.

2002-01-29 Version 0.8.10 released
----------------------------------

2002-01-26 Brian Stafford <brian@stafford.uklinux.net>
      * various files
Copyright messages now show the correct year.
Minor tweaks to kill warnings when compiling with
--enable-more-warnings=picky.  In a few cases this meant adding
a few casts which superficially look unnecessary.  In other
cases this meant adding a number of #undefs to get a vanilla
ISOC environment.

      * missing.h
       Added missing.h which has declarations for Posix/SUS functions
       which may be missing from system libraries on some platforms.

      * snprintf.c configure.in
        Detect broken or missing snprintf() implementations and replace
        if necessary.  N.B. the replacement snprintf.c is taken from the
        libmutt distro and it too, is broken.  However, it *does*
        correctly truncate and \0 terminate output which is too long to
        fit in the buffer and that is the behaviour I rely on.

      * strdup.c
Added strdup() for systems which don't have it.

      * examples/mail-file.c
       Check for errors when smtp_start_session returns.  Fixed
       authinteract so that responses are not accidentally overwritten.

2002-01-24 Brian Stafford <brian@stafford.uklinux.net>
      * htable.c configure.in strndup.c
       Altered code to avoid the use of strndup.  strndup.c is removed
       from the distribution.

2002-01-16 Brian Stafford <brian@stafford.uklinux.net>
      * ntlm/* configure.in
Added NTLM auhentication module.

2002-01-07 Brian Stafford <brian@stafford.uklinux.net>
      * concatenate.c errors.c siobuf.c
       Check return value from snprintf.

2002-01-03 Version 0.8.9 released
---------------------------------

2002-01-02 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
       Added -lsocket to list of libraries searched for getaddrinfo().

2001-12-29 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c configure.in
Added hack for stupid SMTP servers that advertise AUTH using
non-standard syntax from an internet draft that never made it
into RFC 2554. Because this feature is non-standard, it must
be explicitly enabled when configuring.
rsp_{helo,ehlo}() now reset the auth mechanism list before
processing the result. Previously this was done only when AUTH
was advertised.

      * smtp-auth.c
set_auth_mechanisms no longer resets the mechanism list
before processing.  Added a test to avoid duplicates in the
mechanism list.  select_auth_mechanism now guarantees to select
the *first* usable mechanism.  The net effect of these changes
is that multiple calls to set_auth_mechanisms accumulate.

      * auth-client.c
        Rearranged code in auth_set_mechanisms and load_client_plugin
        avoiding the need to repeat the test for plugin acceptability.

2001-12-24 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
Compiling with picky warnings turned on was broken.  Also,
recent glibc versions seem to have decided that strcasecmp and
a few other functions are GNU extensions causing compiles to
fail because of missing declarations.  Naturally, autoconf does
not detect this.  Added a _GNU_SOURCE define to fix this on
potentially affected systems.  No, I don't like it either.

      * strcasecmp.c strncasecmp.c strndup.c
Added these functions in case some systems don't provide them.

2001-12-21 Brian Stafford <brian@stafford.uklinux.net>
      * htable.[ch]
       h_insert now returns a void pointer to the data instead of a
       struct h_node eliminating the need for the h_dptr macro and
       for code using hash tables to maintain two pointers instead
       of one.

      * headers.c
Updated to use the simpler hash table interface.

2001-12-10 Brian Stafford <brian@stafford.uklinux.net>
      * auth-client.c
Use dlsym and friends directly on platforms that have it.

      * configure.in Makefile.am
        Detect dlsym, fall back to using libltdl for other platforms.
        libltdl is no longer distributed significantly reducing tarball
        size.

2001-12-10 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
        A missing comma caused the test for getipnodebyname to fail on
        systems which provide it.

2001-12-06 Version 0.8.8 released
---------------------------------

2001-11-30 Brian Stafford <brian@stafford.uklinux.net>
      * crammd5/md5.h
       The len parameter of md5_update differed in type between
       prototype and definition, preventing compilation if size_t
       is not an unsigned int.

2001-11-29 Brian Stafford <brian@stafford.uklinux.net>
      * crammd5/*.[ch]
       Moved include of config.h from hmacmd5.h to hmacmd5.c.  Make
       sure sys/types.h is included since size_t is used.

      * configure.in
       Added some extra nonsense for systems which redefine
       getaddrinfo to something else in netdb.h

2001-11-27 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in errors.c
Add test for broken strerror_r on OSF-1.

2001-11-12 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
Updated the tests for pthreads.  Should now supply the correct
compiler flags on more systems.

2001-11-07 Version 0.8.7 released
---------------------------------

2001-11-05 Brian Stafford <brian@stafford.uklinux.net>
      * errors.h libesmtp.h
Improve handling of error codes from getaddrinfo.  Delay mapping
of codes to make debugging easier.  libesmtp.h defines new error
codes for the relevant EAI_XXX codes from getaddrinfo.
smtp_strerror will use gai_strerror if appropriate.

2001-10-31 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
Added test for sun platforms and define __EXTENSIONS__ so that
sun's netdb.h will declare the getaddrinfo stuff. (James McPherson)

      * crammd5/md5.[ch]
Type sanity: change u_intXX_t to uintXX_t.  Also changed the
argument for the buffer and length to void * and size_t
respectively in md5_update.  Buffer for md5_final is now
unsigned char.

2001-10-17 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
Fixed a core dump bug which strikes when existing headers in a
message are substituted.

      * Makefile.am
Reinstated libesmtp.spec into tarballs.

2001-08-17 Version 0.8.6 released
---------------------------------

2001-10-17 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp-config.in
Corrected output for --cflags.  Added --numeric-version to make it
simpler for configure scripts to compare version numbers.

      * configure.in libesmtp-spec.in
       Merged changes from Cristophe Lambin.  Spec file now creates
       libesmtp and libesmtp-devel packages.  If OpenSSL is used
       spec file will have openssl dependencies added.

      * Makefile.am
Make sure libesmtp.spec and config.h do not make their way into
tarballs.  These confused the build on some platforms.

2001-10-16 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
       Added --with-openssl[=DIR] option, removed --enable-starttls.
       OpenSSL dependent features are now enabled or disabled en masse
       using --with-openssl.

      * crammd5/md5.[ch] crammd5/Makefile.am
Added public domain MD5 implementation to crammd5 module.  This
enables the CRAM-MD5 mechanism to be built, even if OpenSSL is
not available.

      * smtp-tls.c
       Applied patch from James McPherson correcting __attribute to
       __attribute__

2001-08-05 Version 0.8.5 released
---------------------------------

2001-10-05 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp.spec.in
       Make sure libesmtp-config gets installed!

      * configure.in
Removed STARTTLS's experimental status.  The code works and just
needs debugging.  Certificate management is basic but usable.
       Set defines for strict iso/posix/xopen in headers only when
       --enable-isoc is in force.  This helps avoid disabling the
       tm_gmtoff member in the BSD struct tm unnecessarily.

      * siobuf.[ch]
sio_read/write use void buffers rather than char.

2001-09-28 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c
        Use the event callback to report STARTTLS in use if the security
        level was OK.

      * rfc2822date.c
Provide a function to portably calculate the timezone offset
when struct tm does not provide tm_gmtoff.

      * configure.in
       Don't bother to check for gmtime[_r] since it isn't used any more.

2001-09-26 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
Make sure set_to accepts NULL for the mailbox value.  Added set_cc
which is same as set_to except it fails with a NULL mailbox.

      * Most files.
        Changed references to RFC 821/822 to RFC 2821/2822 respectively.

2001-09-24 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
RFC 2822 requires only the originator and date headers to
be present in a message.  In particular, the presence of the To:
header is no longer required.  RFC 2822's restriction that
headers may not appear multiple times in a messge is enforced
respecting certain special exceptions.

      * examples/mail-file.c
        Added API call to make sure a To: header is generated if not
        in the message.

2001-09-14 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in acinclude.m4 acconfig.h
Reverted to configure.in, reinstated acconfig.h and added
some compatibility stuff to acinclude.m4.  All this to try
and be compatible with autoconf 2.5 *and* 2.13.  I really
hate autoconf.

2001-09-05 Brian Stafford <brian@stafford.uklinux.net>
      * getaddrinfo.c
Check if NO_ADDRESS is defined and different to NO_DATA

2001-08-27 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-tls.c
       Move some detail of selecting STARTTLS to smtp-tls.c

      * smtp-tls.c
Changed STARTTLS policy for Starttls_ENABLED.  If a server offers
STARTTLS, then it must be used and all security requirements must
be met.  If STARTTLS is not offered the session continues in
cleartext.  Previously, Starttls_ENABLED permitted a session to
continue with possibly compromised security.

2001-08-22 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c libesmtp.h
        More certificate management.  Added TLS event reporting.

      * smtp-auth.c
       Fixed behaviour for zero length responses to server challenges.

      * base64.c
Zero length passwords caused an assertion failure in
base64_encode.  base64_decode did not correctly strip blanks
from strings not terminated by \0.  Neither did it correctly
handle zero length strings.

2001-08-21 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-tls.c libesmtp.h
       Added preliminary code for client certificate management.

      * siobuf.[ch]
Changed sio_set_tlsclient_ctx to sio_set_tlsclient_ssl.  This
makes things slightly more flexible for supplying different
client certificates according to the remote host.

2001-08-20 Brian Stafford <brian@stafford.uklinux.net>
      * message-source.c
Fixed memory leak in msg_source_destroy. (Pawel Salek)

2001-08-16 Brian Stafford <brian@stafford.uklinux.net>
      * configure.ac Makefile.am
       Change from using LIBOBJS to LTLIBOBJS.  This prevents the
       wrong objects from being linked by libtool when building
       dynamic libraries.  Added code to configure.ac to correctly
       set LTLIBOBJS and LTALLOCA.

      * smtp-api.c protocol.c errors.c libesmtp-private.h configure.ac
        Code now exclusively uses getaddrinfo.  Removed #ifdef code for
gethostbyname.  Added conditionals for using alternative lwres
library distributed with recent versions of bind.  Delete
--enable-gethostbyname option.  Add --enable-emulate-getaddrinfo.

2001-08-14 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c
Remove unnecessary socket include files.

      * getaddrinfo.[ch]
Added emulation of the RFC 2553 getaddrinfo resolver interface
for systems that don't have it.

2001-08-13 Version 0.8.4 released
---------------------------------

2001-08-13 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
       Completely ignore TLS extension if TLS is already in use.

      * smtp-tls.c
       Fix wrong comparison when initialising OpenSSL mutexes.  Record
       the fact that TLS is in use.  Change a numeric constant to its
       symbolic equivalent.

      * crammd5/client-crammd5.c
        Correct a typo which prevented the hmac computation being
        correctly rendered in hexadecimal.

      * examples/mail-file.c
       Added --tls and --require-tls options and supporting code.

2001-07-31 Brian Stafford <brian@stafford.uklinux.net>
      * configure.ac
        Make plugin directory consistent with RPM.

      * libesmtp.spec
       Applied patch from Pawel Salek to run ldconfig after installing.

2001-07-30 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c configure.ac
Check for uname and use it in preference to gethostname which
is not Posix.

2001-07-19 Brian Stafford <brian@stafford.uklinux.net>
      * configure.ac
       Check for the presence of the OpenSSL headers as well as
       the libraries.  Remove --enable-callbacks option.

      * smtp-api.c libesmtp.h
        Added smtp_version API call.

      * message-callbacks.c
       Removed callbacks which did \n -> CRLF translation.

      * examples/mail-file.c
        Use libESMTP provided callback unless the --crlf option is
        supplied.

2001-07-07 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c
       Only include netinet/in.h if it is actually needed.

2001-07-06 Version 0.8.3 released
---------------------------------

2001-07-06 Brian Stafford <brian@stafford.uklinux.net>
      * examples/mail-file.c
        Made --help more helpful.  Undocumented --no-crlf now renamed
        to --crlf and documented.  When prompting for authentication
        now reads /dev/tty instead of stdin.

      * configure.ac
        Check for -lsocket.

      * protocol.c siobuf.c
        Zero errno before calling certain functions.  Normally the value
        of errno is only tested if the preceeding system call or function
        wrapping the system call failed.  However, in a few cases, the
        functions are called in a loop and the value of errno might
        be tested after a successful return.  This meant that a test
        on the value of errno might yield an invalid result, sometimes
        causing the connection to the server to be incorrectly dropped.
        Unfortunately this effect depended on the amount of data buffering
        provided by the server!

2001-06-29 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c et al.
Added support for sendmail specific XUSR extension.  This informs
sendmail the message is a user submission instead of relay,
so it makes sense to issue the command.  Whether it actually
does anything ...

      * siobuf.c
Fixed return from poll in raw_read and raw_write so that EINTR
is correctly handled.

2001-06-26 Brian Stafford <brian@stafford.uklinux.net>
      * auth-client.c
Fixed a signed/unsigned comparison that stops compilation
when using -Werror.

2001-06-26 Version 0.8.2 released
---------------------------------

2001-06-26 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c siobuf.c
       Resolved a problem related to blocking/non-blocking polling
       for server events.  This could lead to deadlock with certain
       servers.

2001-06-24 Brian Stafford <brian@stafford.uklinux.net>
      * configure.ac  most C sources
       Added --disable-isoc option.  When using gcc, -ansi -pedantic
       are now specified by default since the code compiles without
       warnings when using both flags.
       Added --enable-debug option to control DEBUG and NDEBUG
       definitions.  Assert macros used to check arguments to
       most internal functions.

2001-06-23 Brian Stafford <brian@stafford.uklinux.net>
      * message-source.c
msg_gets now checks for both \r and \n when searching for line
endings.

      * errors.c
API function now includes ommitted the arguments check.

2001-06-22 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c configure.ac
Now uses RFC 2553 / Posix protocol independent getaddrinfo where
possible instead of gethostbyname family of resolver functions.

      * gethostbyname.c configure.ac
       Added ability to use getipnodebyname and corresponding test
       for configure.

2001-06-18 Brian Stafford <brian@stafford.uklinux.net>
      * auth-client.c
        More thorough argument checking on the auth_xxx APIs.
Added some missing malloc return value checking.
When loading a plugin, make sure it provides a response()
function.

      * smtp-auth.c
Added some missing malloc return value checking.

      * various sources
Changed some 'int' types to 'size_t'

      * message-source.c
       In msg_gets, an inconsistent pointer could cause a segfault
       after a realloc which moved the original memory block.
       Increased sizes of malloc/realloc so that RFC 2821 maximium
       line length will not cause realloc.
Added missing malloc/realloc return value checking.

      * protocol.c
If an error occurs while copying the message to the SMTP
server drop the connection without terminating the message.

2001-06-15 Version 0.8.1 released
---------------------------------

2001-06-13 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
        is now configure.ac to suit autoconf 2.5
Eliminated some redundant stuff concerned with libtool.
Now uses AC_HELP_STRING macro where appropriate.
Now use standard AC_FUNC_STRERROR_R macro.
Improved checking for time.h and sys/time.h.

      * libesmtp-config.in
If libltdl was installed, the list of libraries was set to the
wrong thing.

      * errors.c
        Only use strerror_r if it actually works.

      * rfc822date.c
       Try sys/time for struct tm just in case!

2001-06-12 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
       Now checks -lnsl when seraching for gethostbyname_r.
       Only print a warning if strerror_r is not found.
       Chose much more picky compiler warnings when using gcc - this
       has knock on effects through many files.  Compiles should now
       be much cleaner on more platforms.

      * siobuf.h
        Gcc will now check sio_printf()'s argument types against the
        format string.

      * headers.c
Eliminated a variable which was set but not used.
The as yet unimplemented smtp_set_resent_headers API will
succeed if `onoff' is zero.

      * protocol.c
Eliminated variables which were set but not used.
Fixed an uninitialised variable bug which might strike if the
EHLO command received a 5xx status code.  This is likely with
older servers and may result in libESMTP dropping the connection
instead of trying HELO.
Fixed an uninitialised variable bug which could cause the protocol
to QUIT inadvertently after processing the response to EHLO.

      * errors.c
        Rewrote handling of the thread specific data.

2001-06-12 Version 0.8.0 released
---------------------------------

2001-06-11 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c
DELIVERBY extension done - still to test.

2001-06-09 Brian Stafford <brian@stafford.uklinux.net>
      * message-callbacks.c libesmtp.h
        Added standard callback functions for reading messages. libesmtp.h
        provides macros to simplify using them.

2001-06-07 Brian Stafford <brian@stafford.uklinux.net>
      * message-source.c
Changed the declaration of the message callback to make it clearer
that the first argument in fact points to internal state allocated
by the callback.  Strings returned to code reading the message
are now const char *.

2001-05-31 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-api.c protocol.c configure,in
Had another go at the smtp_require_all_recipients() API hack.
The original implementation hoped the SMTP server would report
failure on receiving a zero length message but this isn't
reliable.  This API must be explicitly enabled by ./configure.

2001-05-28 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-auth.c
        Make sure the client won't attempt to authenticate when already
        authenticated.  This could happen if having authenticated and
        enables a security layer, the server offers AUTH again.

      * smtp-tls.c
        Make sure the client won't attempt to negotiate TLS when already
        using TLS.  Also don't use TLS if already authenticated.

      * siobuf.c
       Make the code for non-blocking sockets + OpenSSL more robust.

      * errors.c
Added default case for set_herrno().

2001-05-25 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-auth.c
       On authentication failure the same mechanism was selected again
       instead of moving on to the next one.  This caused an infinite
       loop of failing AUTH exchanges.

2001-05-24 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp.spec.in
       Changed "-a 0" option in %setup macro to "-T -b 0"

      * configure.in
Removed -Werror from --enable-more-warnings=yes as this can be
bothersome for punters.  Added --enable-more-warnings=picky to
stop gcc from using internal prototypes for builtin functions;
also turns on -Werror.

      * protocol.c
free_ghbnctx() was called twice if connect() failed, potentially
causing a SIGSEGV.  This bug was introduced with support for
gethostbyname_r.

2001-05-23 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in
Incremented library version and reset the age.  This is important
because the event callback semantics have changed.
Detect IPv6 sockaddr structure in <netinet/in.h>.

      * protocol.c
       Added 8BITMIME support.  New API call smtp_8bitmime_set_body().
       Report extensions after final set is known.  STARTTLS or AUTH
       can change the set of extensions advertised by the server.
        Typo meant the RET=FULL/HDRS parameter was printed as
        SIZE=FULL/HDRS in MAIL FROM: (D'oh!)

      * errors.c
Changed prototype for smtp_strerror() to allow use of strerror_r.

2001-05-22 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c
        Fixed calls to encode/decode callbacks and added explanation of
        their semantics.  This eliminates potential for a buffer
        overflow bug when decoding expands data read from the socket.

      * libesmtp.spec.in
Fixed inconsistency between package name and tarball.
Use the bz2 version of the tarball as the source.

      * Makefile.am
       Added libesmtp.spec to extra distribution files.

      * gethostbyname.c
Added missing #include <string.h> (gcc builtin prototypes
again - grumble....)

2001-05-21 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c
       Restructuring of reading/writing and polling to permit use
       of non-blocking IO.

      * protocol.c
Revised protocol outer loop makes sure the protocol engine reads
data as soon as it becomes available and defers buffer flushes
until after pending data from the SMTP server has been read.  In
conjunction with non-blocking output this avoids a potential
deadlock described in RFC 2920 when PIPELINING is in use.

2001-05-20 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-etrn.c
Added experimental support for the ETRN extension.

      * protocol.c smtp-api.c
       Check for failure to create a message source and added code
       to actually destroy it thus plugging a memory leak.
       More thorough checking of some API function arguments.

      * siobuf.c
Added sio_mark().  When the write buffer is flushed data written
beyond the mark is retained and the mark is deleted.

      * protocol.c
Added new event types for flagging required extensions not
available or reporting extensions that provide information to
the application.
Command boundaries are marked in the write buffer.  This
prevents partial commands being sent to the SMTP server.

2001-05-18 Version 0.7.1 released
---------------------------------

2001-05-18 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
       Added AF_INET6 support.

2001-05-17 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c gethostbyname.[ch] configure.in acinclude.m4
gethostbyname_r() now in its own file which provides a consistent
interface.  configure selects which version of the function to
compile for when building threaded code.

      * configure.in auth-client.h libesmtp-config.in libesmtp.spec.in
       Directory for installing authentication plugins is now
       configurable.

2001-05-15 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp.spec.in
Added to simplify building RPM packages.

2001-05-14 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-api.c
       Check that all messages have a callback to read the message
       headers and body.

      * tokens.c
Check buffer length in read_atom().
Use of <ctype.h> eliminated.

      * headers.c
        init_header_table() checks for NULL pointers to avoid potential
        SIGSEGVs.

2001-05-13 Brian Stafford <brian@stafford.uklinux.net>
      * rfc822date.c configure.in
Use localtime_r() or gmtime_r() when building a thread safe
library.

      * concatenate.[ch]
       Fixed incorrect shortfall caclulation in concatenate()
       potentially leading to buffer overrun.
       Generally tidied up code.

      * auth-client.c
       auth_response() fails if (*context->client->init)() fails.

      * base64.c
b64_encode() now checks the destination buffer length.

2001-05-11 Brian Stafford <brian@stafford.uklinux.net>
      * libesmtp-config.in Makefile.am
       Added config script to simplify compiling and linking.

      * protocol.c configure.in
       Use gethostbyname_r() when building a thread safe library.

2001-05-09 Brian Stafford <brian@stafford.uklinux.net>
      * Makefile.am configure.in
libltdl is now part of the tarball and is installed if not
already present.

      * protocol.c
       do_session() will now make use of all the addresses returned
       by gethostbyname().  This allows the DNS admin for the domain
       to specify a number of MTAs which handle mail submission.
Failures trying to connect or when processing the greeting or
a response to the EHLO/HELO commands will cause a fallback server
to be tried.  The name server will round robin the responses
balancing the load among the servers.
       When reading the server greeting accept only 220 otherwise the
       connection may have been made to a non-SMTP service.

2001-05-06 Version 0.7.0 released
---------------------------------

2001-05-06 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
session->auth_mechanisms was incorrectly freed in do_session().
This should have been done using destroy_auth_mechanisms().
Moved initialisation of the session variables to the start
of do_session().  This allows checks for some error conditions
to be done before attempting to connect to the SMTP server.
Updated code to select messages and recipients.  This is to
permit calling smtp_start_session() more than once on a given
session.  Second and subsequent calls should only deliver to
recipients not successful in a previous SMTP session.  Removed
a few FIXME comments that no longer apply.

      * smtp-api.c
        smtp_recipient_reset_status() clears the 'complete' flag so that
        the recipient will be retried on a subsequent smtp_start_session().
        Added a new API smtp_recipient_check_complete().  This is true if
        a subsequent call to smtp_start_session() would *not* attempt to
        post the message to this recipient.
        smtp_destroy_session() now frees memory allocated for remote
        server hostname.

      * protocol.c libesmtp-private.h smtp-api.c
        Renamed 'sent' in smtp_recipient_t structure to 'complete'.
        Not all completed recipients might have been sent.

      * protocol.c headers.c smtp-api.c
        Only call gethostname() once and save the result.  Also added
        new API smtp_set_hostname() to allow the application to change
        the default.

2001-05-03 Brian Stafford <brian@stafford.uklinux.net>
      * crammd5/Makefile.am crammd5/hmacmd5.[ch]
       Renamed files to avoid name conflict with Cyrus SASL
       include/ directory.

      * base64.c message-source.c
Added missing #include <string.h>, egcs-2.91.66 didn't
spot the missing prototypes.

      * examples/mail-file.c
        Ignore SIGPIPE.  Means the application isn't killed accidentally
        when something times out during the protocol session.

2001-05-02 Brian Stafford <brian@stafford.uklinux.net>
      * sasl-tls.c protocol.c
       Added experimental support for STARTTLS

2001-04-31 Brian Stafford <brian@stafford.uklinux.net>
      * cram-md5/Makefile.am
hmac-md5.h was missing from the list of sources and hence was
not in the tarball.

2001-04-29 Version 0.6.1 released
--------------------------------

2001-04-30 Brian Stafford <brian@stafford.uklinux.net>
      * auth-client.c
Fixed incorrect SSF comparison for authentication modules
that were already loaded.

2001-04-29 Version 0.6a released
--------------------------------

2001-04-28 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in smtp-api.c example/mail-file.c
Corrected inconsistently named API from smtp_set_auth_context()
to smtp_auth_set_context().

2001-04-25 Version 0.6 released
--------------------------------

2001-04-25 Brian Stafford <brian@stafford.uklinux.net>
      * configure.in Makefile.am */Makefile.am
Added detection of MD5 routines in OpenSSL, to enable
the CRAM-MD5 SASL mechanism.

2001-04-25 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
Corrected parsing bug in parse_status_triplet().

2001-04-16 Brian Stafford <brian@stafford.uklinux.net>
      * api.h
Added new header file.  This currently contains macros
to aid argument checking for API functions.

      * libesmtp.h
Changed name of API function argument check macro.

      * most files
       Wrapped #include <config.h> with #ifdef HAVE_CONFIG_H

2001-04-11 Brian Stafford <brian@stafford.uklinux.net>
      * rfc822date.c
Make sure the absolute value of minutes is used when
       formatting the date.

      * protocol.c
Fixed potential segfault when DATA fails before transferring
a message.

      * smtp-auth.c
        Support for client authentication plugins now working.

      * protocol.c
Support for SMTP AUTH extension.

2001-04-05 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-auth.c
Removed 'want_enhanced' argument from read_smtp_response()
since it was unnecessary.
Added preliminary support for SMTP AUTH extension.

2001-04-04 Brian Stafford <brian@stafford.uklinux.net>
      * Many files
Changes to accomodate stricter error checking options
to gcc.

2001-04-03 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c protocol.c
Changed CONFIG_TLS to USE_TLS (not that it matters yet)
Changed HAVE_LIBSASL to USE_SASL
Mostly for consistency with autoconf convention.

      * configure.in
Checks for pthreads and SASL.

2001-03-21 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-api.c
       Fixed up some missing error reporting.

2001-03-15 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
       Now sets timeouts reccommended in RFC 1123 when waiting for
       server responses.

      * errors.c libesmtp.h
       Changed prefix from ES_ to SMTP_ERR_.  Edits to other files
       to accommodate the change.

2001-03-14 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c libesmtp.h
        Added first lot of event monitoring callbacks.  Simplified the
        declaration for the callback function.  The callback is called
        with different arguments depending on the actual event.

2001-03-09 Brian Stafford <brian@stafford.uklinux.net>
      * tokens.c tokens.h protocol.c
Added const to a few things that should have had it.  Fixed a
corresponding declaration in protocol.c.

      * smtp-auth.c
       Basis of the implementation of the SMTP AUTH command.  This is
       not complete or tested yet, pending the decision about how to
       best implement SASL.

      * siobuf.c siobuf.h
       Added callback functions which encode or decode data just before
       writing or after reading data between the buffers and the
       socket.  This is for use by SASL security layers.

2001-03-07 Brian Stafford <brian@stafford.uklinux.net>
      * concatenate.c concatenate.h
Added minimum_length parameter to cat_{init,reset}().

2001-03-07 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c siobuf.h protocol.c
Allow for seperate read and write file descriptors in
sio_attach().  This is for when support for opening a pipe to
a program running an SMTP server on its stdin/stdout is added.

      * siobuf.c siobuf.h
       Fixed the #ifdef _buffer_h lines to #ifdef _siobuf_h (the perils
       of cut and paste editing).

       Added typedefs for the sio callback functions.

       Added encoder/decoder callbacks for use with security layer parts
       of SASL.  CONFIG_SASL stuff now gone.

2001-03-02 Brian Stafford <brian@stafford.uklinux.net>
      * headers.c
        Implemented the rest of destroy_header_table().

2001-02-27 Version 0.5 released
--------------------------------

2001-02-26 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
       Now issue RSET before MAIL FROM: if a failure response is
       received to the DATA command.

       Fixed possible segfaults when resetting the status in rsp_rest()
       and rsp_quit().

      * headers.c
        Partially implemented destroy_header_table().

      * smtp-api.c
        Now calls destroy_header_table().

      * htable.c
Allow callback in h_destroy() to be NULL.

2001-02-26 Version 0.4 released
--------------------------------

2001-02-25 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
        Second state for the DATA command now does not transfer the
        message if there were no valid recipients.

2001-02-22 Brian Stafford <brian@stafford.uklinux.net>
      * smtp-api.c
        Added APIs to get/set application data in each of the opaque
        structures.

Added protocol event callback API but only for a place holder.
This will be used by applications which want to monitor the
progress of the session and status changes as they happen.
This is different from the protocol monitor which dumps the
actual data transferred on or close to the wire.

      * headers.c
       Added code to handle Sender:

       Fixed From: printing; continuation lines had no leading whitespace.

       In smtp_set_header_option() once Hdr_PROHIBIT is set, it cannot
       be unset.  Prohibit cannot be set for headers already set.

Added smtp_set_resent_headers() but only for a place holder.

      * protocol.c
        Correct parsing of enhanced status codes.  These are only present
        for 2xx, 4xx and 5xx SMTP status codes.

2001-02-18 Version 0.3 released
--------------------------------

2001-02-19 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c smtp-api.c
        Port number in session structure stored in host byte order
        instead of network byte order.  This makes the port number easier
        to read in gdb.

      * protocol.c
Removed white space which crept into the MAIL FROM: and RCPT TO:
commands.  All the servers tested with to date have accepted
this but it wasn't in RFC 821.

      * headers.c
Fixed From: and Disposition-Notification-To: headers to allow
multiple mailboxes as per RFC 822.

Corrected syntax for default Message-Id: generation.  This
should have been "addr-spec" per RFC 822 but didn't have an @.

      * examples/mail-file.c
       Corrected typo that stopped --reverse-path from working.

2001-02-18 Version 0.2 released
--------------------------------
      Core libESMTP API now complete.

2001-02-18 Brian Stafford <brian@stafford.uklinux.net>
      * examples/mail-file.c
       Updated to tweak a few more APIs in libESMTP.
       The example now has a very basic Makefile.

2001-02-17 Brian Stafford <brian@stafford.uklinux.net>
      * protocol.c
        Changed use of strchr() to memchr() since strings read by the
        message callback and header functions are *not* \0 terminated.

      * headers.c
Changed beyond all recognition. :-)
Declaration of smtp_set_header_option() has changed.

      * New files added to support RFC 822 header processing.

2001-02-08 Brian Stafford <brian@stafford.uklinux.net>
      * siobuf.c
       Some additional error checking; extra thoroughness checking the
       return value of write().

      * siobuf.c
      * protocol.c
       Added the protocol monitor callback mechanism.

      * libesmtp.h
      * libesmtp-private.h
      * smtp-api.c
Minor changes to the monitor callback declaration and session
structure for the protocol monitor.

2001-02-04 Version 0.1a released
--------------------------------

2001-04-04 Brian Stafford <brian@stafford.uklinux.net>

      * message-source.c
        Fixed a bad bug that could cause an infinite loop if a message
        was not properly terminated with a \n

2001-02-04 Version 0.1 released
-------------------------------

2001-02-04 Brian Stafford <brian@stafford.uklinux.net>

      * Initial Release