Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks

This commit is contained in:
Maurus Decimus
2026-06-25 19:24:10 +02:00
parent 0b520b6334
commit 0eb08b9fb3
63 changed files with 948 additions and 614 deletions

66
Cargo.lock generated
View File

@@ -1259,7 +1259,7 @@ dependencies = [
[[package]]
name = "common"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"aes-gcm-siv",
"ahash",
@@ -1455,7 +1455,7 @@ checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
[[package]]
name = "coordinator"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"async-nats",
"futures",
@@ -1808,7 +1808,7 @@ checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8"
[[package]]
name = "dav"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"calcard",
"chrono",
@@ -1831,7 +1831,7 @@ dependencies = [
[[package]]
name = "dav-proto"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"calcard",
"chrono",
@@ -2037,7 +2037,7 @@ dependencies = [
[[package]]
name = "directory"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"argon2",
@@ -2288,7 +2288,7 @@ dependencies = [
[[package]]
name = "email"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"aes 0.9.1",
"aes-gcm",
@@ -2396,7 +2396,7 @@ dependencies = [
[[package]]
name = "event_macro"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"proc-macro2",
"quote",
@@ -2912,7 +2912,7 @@ dependencies = [
[[package]]
name = "groupware"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"calcard",
@@ -3195,7 +3195,7 @@ dependencies = [
[[package]]
name = "http"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"async-stream",
"base64 0.22.1",
@@ -3295,7 +3295,7 @@ dependencies = [
[[package]]
name = "http_proto"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"common",
"compact_str",
@@ -3592,7 +3592,7 @@ checksum = "09e54e57b4c48b40f7aec75635392b12b3421fa26fe8b4332e63138ed278459c"
[[package]]
name = "imap"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"common",
@@ -3619,7 +3619,7 @@ dependencies = [
[[package]]
name = "imap_proto"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"chrono",
@@ -3832,7 +3832,7 @@ dependencies = [
[[package]]
name = "jmap"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"aes-gcm",
"aes-gcm-siv",
@@ -3920,7 +3920,7 @@ dependencies = [
[[package]]
name = "jmap_proto"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"calcard",
@@ -4379,9 +4379,9 @@ dependencies = [
[[package]]
name = "mail-auth"
version = "0.9.2"
version = "0.10.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7d3c5a279d798bf41bfcf94ee593a34b545fb2010ebf5cfce3416d6b4019f697"
checksum = "9e533fed1dd496906478a2ebf4700525da7579ef116f3e90812ca5832aedd158"
dependencies = [
"aws-lc-rs",
"flate2",
@@ -4422,7 +4422,7 @@ dependencies = [
[[package]]
name = "managesieve"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"common",
@@ -4564,7 +4564,7 @@ checksum = "c797b9d6bb23aab2fc369c65f871be49214f5c759af65bde26ffaaa2b646b492"
[[package]]
name = "migration"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"base64 0.22.1",
"common",
@@ -4781,7 +4781,7 @@ dependencies = [
[[package]]
name = "nlp"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"bincode 1.3.3",
@@ -5585,7 +5585,7 @@ dependencies = [
[[package]]
name = "pop3"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"common",
"directory",
@@ -5768,7 +5768,7 @@ dependencies = [
[[package]]
name = "proc_macros"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"proc-macro2",
"quote",
@@ -6391,7 +6391,7 @@ checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
[[package]]
name = "registry"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"hashify",
@@ -7276,7 +7276,7 @@ dependencies = [
[[package]]
name = "services"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"aes-gcm",
"aes-gcm-siv",
@@ -7534,7 +7534,7 @@ checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
[[package]]
name = "smtp"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"base64 0.22.1",
@@ -7636,7 +7636,7 @@ dependencies = [
[[package]]
name = "spam-filter"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"common",
"compact_str",
@@ -7745,7 +7745,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
[[package]]
name = "stalwart"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"common",
"coordinator",
@@ -7753,7 +7753,7 @@ dependencies = [
"directory",
"email",
"groupware",
"http 0.16.11",
"http 0.16.12",
"http_proto",
"imap",
"jemallocator",
@@ -7782,7 +7782,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
[[package]]
name = "store"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"arc-swap",
@@ -8022,7 +8022,7 @@ dependencies = [
[[package]]
name = "tests"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"async-trait",
@@ -8046,7 +8046,7 @@ dependencies = [
"form_urlencoded",
"futures",
"groupware",
"http 0.16.11",
"http 0.16.12",
"http-body-util",
"http_proto",
"hyper",
@@ -8589,7 +8589,7 @@ dependencies = [
[[package]]
name = "trc"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"base64 0.22.1",
@@ -8682,7 +8682,7 @@ checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
[[package]]
name = "types"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"blake3",
"compact_str",
@@ -8880,7 +8880,7 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
[[package]]
name = "utils"
version = "0.16.11"
version = "0.16.12"
dependencies = [
"ahash",
"arcstr",