Mtundu watsopano wa seva yamakalata ya Exim 4.93

Pambuyo 10 miyezi chitukuko chinachitika kutulutsidwa kwa seva yamakalata Chithunzi 4.93, momwe zowongolera zosonkhanitsidwa zapangidwa ndipo zatsopano zawonjezedwa. Malingana ndi November kafukufuku wamagetsi pafupifupi ma seva miliyoni miliyoni, gawo la Exim ndi 56.90% (chaka chapitacho 56.56%), Postfix imagwiritsidwa ntchito pa 34.98% (33.79%) ya ma seva amakalata, Sendmail - 3.90% (5.59%), Microsoft Exchange - 0.51% ( 0.85 peresenti.

waukulu kusintha:

  • Thandizo kwa otsimikizira akunja (RFC 4422). Pogwiritsa ntchito lamulo la "SASL EXTERNAL", kasitomala akhoza kudziwitsa seva kuti agwiritse ntchito zizindikiro zomwe zadutsa ntchito zakunja monga IP Security (RFC4301) ndi TLS kuti zitsimikizidwe;
  • Adawonjezera kuthekera kogwiritsa ntchito mtundu wa JSON pakufufuza. Zowonjezeranso zosankha za masks okhazikika "forll" ndi "aliyense" pogwiritsa ntchito JSON.
  • Onjezani $tls_in_cipher_std ndi $tls_out_cipher_std zosintha zomwe zili ndi mayina a cipher suites ofanana ndi dzina lochokera ku RFC.
  • Mbendera zatsopano zawonjezedwa kuti ziwongolere ma ID a mauthenga mu chipika (chokhazikitsidwa ndi zoikamo chojambula_chosankha): β€œmsg_id” (yoyatsidwa mwachisawawa) yokhala ndi chizindikiritso cha uthenga ndi β€œmsg_id_created” yokhala ndi chizindikiritso chopangidwira uthenga watsopano.
  • Thandizo lowonjezera la "case_insensitive" njira ya "verify=not_blind" kuti musanyalanyaze mawonekedwe a zilembo panthawi yotsimikizira.
  • Njira yoyeserera yowonjezedwa ya EXPERIMENTAL_TLS_RESUME, yomwe imakupatsani mwayi woyambiranso kulumikizidwa komwe kudayimitsidwa kale kwa TLS.
  • Onjezani njira ya exim_version kuti ipitirire kuchuluka kwa zingwe zamtundu wa Exim m'malo osiyanasiyana ndikudutsa $exim_version ndi $version_number zosintha.
  • Onjezani ${sha2_N:} zosankha za opareta za N=256, 384, 512.
  • Zosintha za "$ r_ ...", zokhazikitsidwa kuchokera kunjira zomwe zingagwiritsidwe ntchito popanga zisankho zokhudzana ndi njira ndi zoyendera.
  • Thandizo la IPv6 lawonjezedwa ku zopempha za SPF.
  • Mukachita cheke kudzera pa DKIM, kuthekera kosefa ndi mitundu ya makiyi ndi ma hashi awonjezedwa.
  • Mukamagwiritsa ntchito TLS 1.3, chithandizo chowonjezera cha OCSP (Online Certificate Status Protocol) chimaperekedwa macheke udindo wochotsa satifiketi.
  • Anawonjezera chochitika cha "smtp:ehlo" kuti ayang'anire mndandanda wa magwiridwe antchito operekedwa ndi chipani chakutali.
  • Anawonjezera njira ya mzere wolamula kuti musunthire mauthenga kuchokera pamzere wina kupita ku wina.
  • Zosintha zomwe zawonjezeredwa ndi mitundu ya TLS pazofunsira zomwe zikubwera ndi zomwe zikutuluka - $tls_in_ver ndi $tls_out_ver.
  • Mukamagwiritsa ntchito OpenSSL, ntchito yawonjezedwa kuti mulembe mafayilo okhala ndi makiyi amtundu wa NSS polemba mapaketi a netiweki omwe alandidwa. Dzina lafayilo limayikidwa kudzera mumtundu wa SSLKEYLOGFILE. Mukamanga ndi GnuTLS, magwiridwe antchito ofanana amaperekedwa ndi zida za GnuTLS, koma zimafunikira kuthamanga ngati mizu.

Source: opennet.ru

Kuwonjezera ndemanga