Search found 21699 matches

by martin
2019-08-24 09:53
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

I've merged the pull request. :)
by martin
2019-08-18 15:41
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

The host name which you mentioned in your original post (popmail.libero.it) now has a A record but no CNAME. So if you were to try it today with the same host and same hMailServer version as before I don't think would get the error. I have verified that the external fetch can connect to that server ...
by martin
2019-08-18 15:28
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

Out of interest, why did the ported code in 5.7 behave different to when it was in 5.6? As part of changes for 5.7 (years ago), some duplicated code was removed and some code was made more consistent (DNS queries were made in 2 different ways in the DNSResolver class which was reduced to 1). As par...
by martin
2019-08-18 14:37
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

The CNAME issue is fixed in 5.7 build 2482. This is a relatively large change, since I had to clean up the DNS-related code to fix it properly. Could be that there are some side effects. The change itself affects all DNS resolution, and not just the resolution performed when POP3-downloads are being...
by martin
2019-08-18 09:57
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

The CNAME issue issue is reported here (since before):
https://github.com/hmailserver/hmailserver/issues/217

I started fixing it yesterday. I'm doing a fairly large change, so probably won't have time to finish it today (but rather tomorrow or tuesday).
by martin
2019-08-17 09:42
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

Nice. RvdH provided me with a pull request for the changes he mentioned above, so they are in 5.7 branch now (so far untested).
by martin
2019-08-16 17:15
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

The code I merged contained a mix of tabs/spaces. In Visual Studio, the settings are under Tools ->Options->Text Editor->C/C++->Tabs where I have always used "Insert spaces" and tab size/indent size set to 3. At some point I should probably update all code to use whatever is default in Visual Studio...
by martin
2019-08-16 16:56
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

I've merged the changes now. Did some fixes to indentation and added integration tests for it. Thanks!
by martin
2019-08-16 12:00
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

Yep I saw. I intend to review it during weekend.
by martin
2019-08-15 21:30
Forum: Development & alpha discussions
Topic: External POP3 Fetcher - DELE without RETR - crashing frequently
Replies: 26
Views: 2209

Re: External POP3 Fetcher - DELE without RETR - crashing frequently

Did it work better now? If you are still getting some minidumps please send to me on martin@hmailserver.com for analysis.
by martin
2019-08-13 14:06
Forum: Development & alpha discussions
Topic: External POP3 Fetcher - DELE without RETR - crashing frequently
Replies: 26
Views: 2209

Re: External POP3 Fetcher - DELE without RETR - crashing frequently

Ah, you're right. The fix was not necessary for 5.6.x-branch - I reverted it. This experimental 5.7.0-build has made me a bit confused.

I'll check the build instructions.
by martin
2019-08-13 12:32
Forum: Development & alpha discussions
Topic: External POP3 Fetcher - DELE without RETR - crashing frequently
Replies: 26
Views: 2209

Re: External POP3 Fetcher - DELE without RETR - crashing frequently

Yea, I saw his signature but that doesn't tell me for sure that he's using that version on the server where he's seeing the issue in production. If he is using that build, he's technically using a fork of hMailServer (and not hMailServer), but he wants a fix for hMailServer so that's what's confusin...
by martin
2019-08-13 12:24
Forum: Development & alpha discussions
Topic: External POP3 Fetcher - DELE without RETR - crashing frequently
Replies: 26
Views: 2209

Re: External POP3 Fetcher - DELE without RETR - crashing frequently

The new 5.6.8 build with the fix applied is included here:
https://build.hmailserver.com/viewLog.h ... =artifacts

But if you're already using a newer experimental build, you can't install this one. So need to know what you're currently running.
by martin
2019-08-13 11:51
Forum: Development & alpha discussions
Topic: Switching from Multibyte to Unicode
Replies: 4
Views: 625

Re: Switching from Multibyte to Unicode

Hmm, long time since I looked at this code. There are two string types types in hMailServer- HM::String and HM::AnsiString. HM::String relies on wchar_t internally, while HM::AnsiString relies on char. The wchar_t type is an implementation-defined wide character type. In the Microsoft compiler, it r...
by martin
2019-08-13 11:38
Forum: Development & alpha discussions
Topic: External POP3 Fetcher - DELE without RETR - crashing frequently
Replies: 26
Views: 2209

Re: External POP3 Fetcher - DELE without RETR - crashing frequently

There will be an updated version of hMailServer 5.6.8 today with the fix included. Not really clear what version you're using though. Are you currently using the experimental 5.7-build created by Dravion in production? If so I could create a new 5.7-build as well. But I wouldn't use 5.7 in productio...
by martin
2019-08-13 11:21
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

Re: hMailServer 5.7

I have merged this into master and also added it for 5.6.8 to give derelvis a chance to test it earlier (since he/she may not want to upgrade to 5.7 yet). I am creating new builds now which I'll run through the test suite to check that there's no regressions.
by martin
2019-08-11 21:34
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 99
Views: 6641

hMailServer 5.7

hMailServer 5.7 builds are now available for download on the build server (x64+newest openssl) at https://build.hmailserver.com/. If someone is curious you can try it out. The next step is to continue go through the issues listed and GitHub and see if there are any which needs fixing in 5.7 which I'...
by martin
2019-08-11 21:30
Forum: Off-topic discussions
Topic: Forum subscription emails
Replies: 28
Views: 1724

Re: Forum subscription emails

What was your new empty user account - mdibella? I guess I can just delete that one, and then you can change account name and email address in your settings?
by martin
2019-08-11 19:53
Forum: Off-topic discussions
Topic: Forum subscription emails
Replies: 28
Views: 1724

Re: Forum subscription emails

Okay fixed. It worked when I originally tested it because i tested using my own email address which happened to be 'local' on the email server. Should work better now.
by martin
2019-08-11 19:46
Forum: Off-topic discussions
Topic: Forum subscription emails
Replies: 28
Views: 1724

Re: Forum subscription emails

Hehe, thanks guys, I'll check this. I did a complete reinstall some week ago and clearly I missed a step :)
by martin
2019-08-09 16:48
Forum: Development & alpha discussions
Topic: New Boost/OpenSSL versions
Replies: 14
Views: 1316

Re: New Boost/OpenSSL versions

Yeap. I fixed them now.

The errors.txt file is a bit silly actually. It's just a way to keep track of what error numbers have been used. It isn't actually used for anything during compilation/runtime.
by martin
2019-08-09 13:55
Forum: Development & alpha discussions
Topic: New Boost/OpenSSL versions
Replies: 14
Views: 1316

Re: New Boost/OpenSSL versions

Alright, then it makes sense :)
by martin
2019-08-09 13:09
Forum: Development & alpha discussions
Topic: Removing XP, Vista and Server 2003 support in 5.7
Replies: 6
Views: 794

Re: Removing XP, Vista and Server 2003 support in 5.7

There's nothing inherent in hMailServer 5.7 (right now) which doesn't work with 64-bit versions of XP/2013 and Vista. The main reasons I would want to drop it is: * To actually support it continuously is quite a lot of work test-wise, because I would need to test features and database connectivity w...
by martin
2019-08-09 12:51
Forum: Development & alpha discussions
Topic: New Boost/OpenSSL versions
Replies: 14
Views: 1316

Re: New Boost/OpenSSL versions

Okay. But you know there are already builds you can download from https://build.hmailserver.com/ right? Of course you can create your own builds, but I'm not sure I understand why?
by martin
2019-08-08 22:07
Forum: Development & alpha discussions
Topic: New Boost/OpenSSL versions
Replies: 14
Views: 1316

Re: New Boost/OpenSSL versions

The 5.6.8-branch hasn't been updated to support x64. x64-support is being added in 5.7, which is currently in the master-branch. I had to do a lot of fixes (like >50) to get hMailServer x64-compatible and those are in the master branch - not in the 5.6.8-branch. You may be able to compile hMailServe...
by martin
2019-08-08 19:06
Forum: Development & alpha discussions
Topic: Removing XP, Vista and Server 2003 support in 5.7
Replies: 6
Views: 794

Removing XP, Vista and Server 2003 support in 5.7

I will remove the compatibility with XP, Vista and Windows Server 2003 in hMailServer 5.7. Going forward, when a new hMailServer version is released I will drop support for any OS which is no longer supported by Microsoft. Windows Server 2003 for example hasn't been receiving security updates since ...
by martin
2019-08-08 19:01
Forum: Development & alpha discussions
Topic: Removing x86 support in 5.7
Replies: 7
Views: 894

Re: Removing x86 support in 5.7

I have removed x86 support now.

Removing Windows 7/8 seems a bit premature. They are still supported by Microsoft (unless you're talking about specific service pack configurations).
by martin
2019-08-05 12:47
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Alright, cool :)

The latest 'official' beta-build on the download page resolves the "verify"-issue. But I understand you're using a fork.
by martin
2019-08-05 11:25
Forum: Development & alpha discussions
Topic: C/C++ Unit Test's for hMailServer
Replies: 2
Views: 486

Re: C/C++ Unit Test's for hMailServer

From what I've read Google Test seems to be the easiest to use, and it has a permissive license s i think we should try that one. I think we should just implement this on the master-branch and not in previous versions.
by martin
2019-08-05 11:21
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

The ONLY servers that I am connecting with via TLSv1.3 is the gmail servers, for incoming, outgoing and external pop3 download. All others are still TLSv1.2 (or nude) Not sure if you're saying that there's a problem or just sharing what you're seeing? Roughly ~15% of web sites supports TLS1.3, and ...
by martin
2019-08-05 11:16
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Are you trying to use the master branch or 5.7-branch with the new OpenSSL/Boost? I have not merged the fixes to the master branch/5.7-branch yet - I will do that later this week. You can check the 5.6.8 branch to see what changes I had to do. The short version is that a few of the OpenSSL/Boost API...
by martin
2019-08-04 20:51
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

From what I can understand from a quick read, google's variant is easier to use. Since I don't really have any other preference, I think it would make sense to go for that one.

If you want to discuss this further please create a new thread because this one is covering too many topics now.
by martin
2019-08-04 20:14
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

I've pushed a fix (still testing it though) In TLS 1.3, SNI is required and I hadn't implemented that in hMailServer. If hMailServer connects to pop.gmail.com:995 without including SNI, then pop.gmail.com will complete the TLS-handshake but return an incorrect SSL-certificate. This incorrect SSL-cer...
by martin
2019-08-04 19:18
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Found the issue, it's related to SNI. I'll see if I can fix it.
by martin
2019-08-04 19:11
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Nice find. I'm seeing that as well. Only happens for TLS 1.3 - if I disable TLS 1.3 it works fine.

Will debug and see what's causing it.
by martin
2019-08-04 15:21
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

If you're using "STARTTLS (Optional)", I'm not sure tweaking this has so much value since doing a downgrade-MITM-attack would be trivial in those cases anyway. If you have configured hMailServer to enforce TLS then it makes more sense.
by martin
2019-08-04 15:20
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

99% of the tests of the C++ code are integration-tests which runs through full flows, such as retrieval of email from an external POP3 account, delivery using STARTTLS, backup/restore and so on.

There are a few "unit-test"-level tests in ClassTester, but it's very rudimentary.
by martin
2019-08-04 12:20
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Have you tried to use the new build already? I'm running it on my server now and was thinking I'll run it for a few days before I put it up on the download section. But I've verified that the communication with external services (such as gmail) is now done using TLS 1.3.
by martin
2019-08-04 11:06
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

I was probably a bit unclear. Forget the API part. The important part is: The cipher list you specify in the UI is the cipher list used. There's no other internal cipher list which will be used. The format of the cipher list is described under the section "CIPHER STRINGS" here: https://www.openssl.o...
by martin
2019-08-03 21:38
Forum: Development & alpha discussions
Topic: New Boost/OpenSSL versions
Replies: 14
Views: 1316

New Boost/OpenSSL versions

I have updated the code to use the latest Boost & OpenSSL-versions in Git.

The way you compile these two have changed, so I've updated the "Building OpenSSL" and "Building Boost"-sections here:

https://github.com/hmailserver/hmailserver/tree/5.6.8
by martin
2019-08-03 21:22
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

The cipher list you enter in the user interface is given as-is to OpenSSL using an OpenSSL API (https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_cipher_list.html). OpenSSL parses it and decide what ciphers match. I'm honestly not 100% sure about the syntax for the cipher string itself. The one...
by martin
2019-08-02 15:20
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Re: Disable SSLv3 in hMailServer >5.6.8

Yes, I agree that it seems unlikely. Still wanted to post to see if someone says anything else than what I think. :)
by martin
2019-08-02 14:48
Forum: Development & alpha discussions
Topic: Disable SSLv3 in hMailServer >5.6.8
Replies: 37
Views: 2757

Disable SSLv3 in hMailServer >5.6.8

To support TLS 1.3, hMailServer needs to be updated to use latest OpenSSL-version. The latest OpenSSL-version does not come with SSL 3-support. It's possible to compile OpenSSL with SSL3 support, but haven't gotten this to work. To solve this I'm leaning towards simply removing the SSL 3-support fro...
by martin
2019-08-02 12:39
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

POODLE is SSL 3.0 as far as i know, Disable SSL 3.0 and you are good, no? Yes. And fallback prevention was added to OpenSSL years ago (2014). Either way, if you're using hMailServer with "STARTTLS (Optional)" which I assume to be the case 99% of the time, this is moot, since a MITM can easily fallb...
by martin
2019-08-02 12:36
Forum: Development & alpha discussions
Topic: hMailServer 5.7.0 64-Bit (LTS) - June Release with LibreSSL 2.9.2 update
Replies: 13
Views: 2389

Re: hMailServer 5.7.0 64-Bit (LTS) - June Release with LibreSSL 2.9.2 update

There will be a "official" hMailServer 5.7 beta build when I've upgraded to latest OpenSSL, ditched x86 support and upgraded Boost which will happen next week. I have upgraded OpenSSL but need to change some code for Boost 1.70 to work. Removing the x86 support should be straight forward. Keep in mi...
by martin
2019-08-02 10:16
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

I think it would make most sense from 5.7-branch. I'm in the process of updating to latest boost and openssl now (both for 5.6 and 5.7). OpenSSL only gave a single compilation error (and some side effects). So would probably make sense to wait for that, and the removal of x86. The main issue I've ha...
by martin
2019-08-02 09:22
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

Yes, it's quite strange that some people assume that just because you can download something for free, you're entitled to free support and maintenance for +10 years and a stream of features created by a single person. People get sick and die all the time. Companies should know better than that.
by martin
2019-08-02 09:12
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

I will go through them and either close them or fix them. Can't give you a schedule for this though. Anyone is of course free to create their own forks of hMailServer and incorporate fixes, but for me it's just ha hobby project. I won't set of weeks to implement "nice-have" features unless they are ...
by martin
2019-08-02 07:36
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

I think that we've shown that hmailserver will downgrade connections if asked by the client - which isn't ideal. Unless I misunderstand you, that's just how TLS works though? During the TLS handshake, the client and server will agree on what TLS versions and ciphers to use. If the server supports 1...
by martin
2019-08-02 06:41
Forum: Development & alpha discussions
Topic: Removing x86 support in 5.7
Replies: 7
Views: 894

Removing x86 support in 5.7

I'm leaning towards removing x86 support in 5.7 and just supporting x64. The main reason is 'development experience'. Maintaining two separate versions increases build times, makes code more complex, makes it take longer to set up a dev environment and so on.

Any thoughts on that?
by martin
2019-08-02 06:25
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

Any plans for 5.7? In short: No, there's no plans such as scope or date. I'm still not sure exactly what the issue is when it comes to TLS. Is the lack of TLS1.3 an actual for emailserver-to-emailserver a big issue? I would guess 99% of the email servers on internet doesn't support it, so in realit...
by martin
2019-08-01 23:09
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

I'll give this a look next week to see what compilation errors I get at least. I agree it would make sense to use Libre, but for a minor upgrade like 5.6.x I'm a bit hesitant to switch to another SSL library.
by martin
2019-08-01 22:51
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

OpenSSL 1.0.2.x series getting out of Support soon (on Sep 21. 2019). Are you sure about that date? Reading on https://www.openssl.org/policies/releasestrat.html, it says "Version 1.0.2 will be supported until 2019-12-31 (LTS)." and on https://www.openssl.org/source/ it says "Our previous LTS versi...
by martin
2019-08-01 22:33
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

Can you tell me what problems you're facing with OpenSSL? You mean the fact that hMailServer relies on it (rather than LibreSSL), or that the latest stable version is using an old version? (I put up a new beta some hours ago with the latest OpenSSL version). Also, when you say TLS are you thinking a...
by martin
2019-08-01 22:05
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

I understand the purpose of HCD and it makes sense to have a cross-platform easy-to-use email server. My point was more like it sounds like it will be confusing to call it hMailServer or have it as a part of its name, since it's essentially a completely different piece of software. The original fork...
by martin
2019-08-01 20:01
Forum: Development & alpha discussions
Topic: Martin is back
Replies: 45
Views: 3692

Re: Martin is back

There are lots of Syntax errors if you even try to built hMailServer. I can compile it without syntax error (and so can the build environment). What syntax errors are you getting? Or do you mean you get errors when trying to compile using VS2017/VS2019? Because that would be expected due to the C++...
by martin
2018-02-25 15:50
Forum: Off-topic discussions
Topic: ReCaptcha V1 on registration form will shutdown soon
Replies: 9
Views: 5384

Re: ReCaptcha V1 on registration form will shutdown soon

That was fun... I've upgraded to latest phpbb-version and after fiddling around in various places I think the forum is back to "almost same feature set as before". :) I've upgraded banhammer to latest version and tested it quickly and it seems to still work. Please let me know if it doesn't work for...