Swaks 20240103.0

New features

• Added --cc and --bcc options
• Numerous TLS debugging and verification improvements
  • Debug output contains whether a client cert was requested and whether one was sent
  • Add new options --tls-verify-ca and --tls-verify-host to differentiate between types of certificate verification (--tls-verify does both)
  • Add --tls-target option to allow setting of hostname to be used in hostname verification; this is useful in some inet debugging situations and required to do hostname verification with --socket or --pipe
  • Add --tls-chain
  • Add --tls-get-peer-chain option (analogous to --tls-get-peer-cert)
  • Certificate debug now includes all client and peer certs, it a chain was used
  • Certificate debug now includes notAfter, commonName, and subjectAltName

Notable changes

• --output-file, --output-file-stderr, and --output-file-stdout now truncate the specified file if it already exists
• Documentation improvements
• Extensive test harness improvements
• Add new stop-point XCLIENT-HELO to address lack of specificity when mixing XCLIENT usage with the HELO stop-point
• Add new stop-point PROXY
• Use IO::Socket::IP by default. Will still use IO::Socket::INET/INET6 to cover transition, but this is deprecated and will be removed in the future
• TLS session debug information is now printed even if we decide not to continue the session (e.g. for failed verification)
• Previously-deprecated functionality to allow some options to be either a filename or a literal string has been removed; using the @ sigil is now the only way to specify file contents
• Previously-deprecated -g option removed

Notable bugs fixed

• TLS certificate verification did not always work, it should now