This is an automated email from the ASF dual-hosted git repository.
chibenwa pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/james-jdkim.git
from e5cd9ff [FIX] DKIMVerifier: bound the number of signatures verified
per message
new 5f1209c [FIX] SignatureRecordImpl: encode the raw bytes given to
setSignature/setBodyHash
new b2c96a4 [FIX] SignatureRecord: reject an x= tag that is not 1*12DIGIT
new b52bd06 [FIX] SignatureRecord: reject a t= tag that is not 1*12DIGIT
new 5e84be7 [FIX] SignatureRecord: reject an l= tag that is not 1*76DIGIT
new c0235cd [FIX] SignatureRecord: require exactly one '@' in i=
new 1f4d1c6 [FIX] Use a fixed locale for case-insensitive comparisons
new 3e357ce [FIX] DKIMVerifier: report an undecodable bh= as a PermFail
new b2ac4bd [FIX] PublicKeyRecordImpl: report an undecodable p= as
IllegalStateException
new f23ca70 [FIX] TagValue: decode b= and bh= as strict base64 once FWS
is removed
new bbab524 [FIX] PublicKeyRecordImpl: only build RSA public keys
new e311429 [FIX] PublicKeyRecordImpl: let the g= wildcard match line
terminators
new ca14ffd [FIX] DKIMQuotedPrintable: follow the RFC 6376 grammar
strictly
new 754fc27 [FIX] TagValue: restrict values to VALCHAR and the end of the
list to FWS
new aa1885c [FIX] Relaxed header canonicalization: only delete WSP around
the value
new 61801be [FIX] SignatureRecord: empty the b= tag itself in
toUnsignedString()
new 6c3037f [FIX] Simple header canonicalization: hash the signature
field name as written
new ed277c9 [FIX] Message: take header fields from the raw header bytes
new f05f7ea [FIX] Message: reject header lines that are neither fields
nor continuations
new dc7e23f [FIX] DKIMVerifier: keep one result per DKIM-Signature field,
in field order
new f19a5c4 [FIX] DKIMVerifier: do not select the verified field for a
DKIM-Signature h= entry
new e6c7c06 [FIX] Relaxed body canonicalization: an empty body stays empty
new 0527338 [FIX] Body canonicalizers: keep a lone CR in place, whatever
the chunking
new 71bc837 [FIX] DNSPublicKeyRecordRetriever: report a failing lookup as
a TempFail
new 57b86a0 [FIX] DNSPublicKeyRecordRetriever: query the absolute name,
return raw strings
new eb72d80 [FIX] SignatureRecord: reject an x= that is not greater than
t=
new bae47c8 [FIX] Header hashing: reject chars above U+00FF instead of
hashing '?'
new a74fba1 [FIX] DKIMVerifier: do not let unsigned extra once-only
fields pass
new 5495cf9 [FIX] DKIMVerifier: report permanent errors as permerror, not
fail
new dc434c3 [FIX] DKIMVerifier: honour the s= service type of the key
record
new 327ad8d [FIX] DKIM-Signature: accept only the RFC 6376 a= algorithms
new ebd3b60 [FIX] DKIMVerifier: reject signatures made with short RSA keys
new b7858dd [FIX] Key record: reject malformed h=, k= and t= lists
new 7fb0010 [FIX] DKIMVerifier: add an option to refuse rsa-sha1
signatures
new 05c23ed [FIX] DKIMSigner: fold the DKIM-Signature field it returns
new ad7919b [FIX] DKIM-Signature: reject d= and s= values that are not
domain names
new 9ce2bd1 [FIX] DKIM-Signature: reject a malformed i=
new 1254075 [FIX] DKIM-Signature: reject a malformed q=
new 55f875f [FIX] DKIMVerifier: check signatures locally before the key
lookup
new 9516527 [FIX] DKIM-Signature: reject a malformed z=
new e2c458c [FIX] Message: parse with mime4j's permissive limits
new e170c39 [FIX] Body canonicalizers: ignore the high-order bits of
write(int)
new 01e841d [FIX] SignatureRecordImpl: do not overflow the stack on long
i=, q= and z=
new d9046a5 [FIX] VerifierOptions: check only From for unsigned
duplicates by default
new 25721f9 [FIX] Tag values: accept the UTF-8 octets RFC 8616 allows
The 44 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
docs/modules/ROOT/pages/usage.adoc | 66 +++
.../java/org/apache/james/jdkim/DKIMCommon.java | 59 ++-
.../java/org/apache/james/jdkim/DKIMSigner.java | 5 +-
.../java/org/apache/james/jdkim/DKIMVerifier.java | 241 +++++++---
.../apache/james/jdkim/api/PublicKeyRecord.java | 10 +
.../java/org/apache/james/jdkim/api/Result.java | 30 +-
...cord.java => UnsignedDuplicateFieldPolicy.java} | 47 +-
.../apache/james/jdkim/api/VerifierOptions.java | 174 +++++++
.../james/jdkim/canon/CompoundOutputStream.java | 2 +
.../james/jdkim/canon/DigestOutputStream.java | 2 +
.../james/jdkim/canon/LimitedOutputStream.java | 2 +
.../jdkim/canon/RelaxedBodyCanonicalizer.java | 88 ++--
.../james/jdkim/canon/SimpleBodyCanonicalizer.java | 99 ++--
...eption.java => SignatureMismatchException.java} | 29 +-
.../apache/james/jdkim/impl/BodyHasherImpl.java | 8 +-
.../james/jdkim/impl/CompoundBodyHasher.java | 87 +++-
.../jdkim/impl/DNSPublicKeyRecordRetriever.java | 18 +-
.../jdkim/impl/HeaderCapturingInputStream.java | 98 ++++
.../java/org/apache/james/jdkim/impl/Message.java | 126 +++--
.../james/jdkim/parser/DKIMQuotedPrintable.java | 35 +-
.../james/jdkim/tagvalue/PublicKeyRecordImpl.java | 72 ++-
.../james/jdkim/tagvalue/SignatureRecordImpl.java | 250 +++++++++-
.../jdkim/tagvalue/SignatureRecordTemplate.java | 64 ++-
.../org/apache/james/jdkim/tagvalue/TagValue.java | 144 +++++-
.../test/java/org/apache/james/jdkim/DKIMTest.java | 508 ++++++++++++++++++++-
.../james/jdkim/DKIMVerifierOptionsTest.java | 80 ++++
.../org/apache/james/jdkim/DKIMVerifierTest.java | 170 ++++++-
.../james/jdkim/DNSPublicKeyRetrieverTest.java | 75 +++
.../java/org/apache/james/jdkim/PerlDKIMTest.java | 4 +-
.../apache/james/jdkim/PublicKeyRecordTest.java | 204 ++++++++-
.../james/jdkim/SignatureRecordImplTest.java | 337 +++++++++++++-
.../james/jdkim/SignatureRecordTemplateTest.java | 60 ++-
.../org/apache/james/jdkim/api/ResultTest.java | 32 +-
.../jdkim/canon/RelaxedBodyCanonicalizerTest.java | 51 +++
.../jdkim/canon/SimpleBodyCanonicalizerTest.java | 32 +-
.../apache/james/jdkim/impl/MessageLimitsTest.java | 89 ++++
.../jdkim/parser/DKIMQuotedPrintableTest.java | 24 +-
.../apache/james/jdkim/tagvalue/TagValueTest.java | 27 ++
pom.xml | 2 +-
39 files changed, 3055 insertions(+), 396 deletions(-)
copy main/src/main/java/org/apache/james/jdkim/api/{PublicKeyRecord.java =>
UnsignedDuplicateFieldPolicy.java} (64%)
copy
main/src/main/java/org/apache/james/jdkim/exceptions/{PermFailException.java =>
SignatureMismatchException.java} (65%)
create mode 100644
main/src/main/java/org/apache/james/jdkim/impl/HeaderCapturingInputStream.java
create mode 100644
main/src/test/java/org/apache/james/jdkim/impl/MessageLimitsTest.java
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
