Commit Graph

404 Commits

Author SHA1 Message Date
Maurus Decimus
c105cff8fb Fix CalDAV: calendar-query REPORT returns empty calendar-data for JMAP-created events 2026-07-19 21:27:01 +02:00
Maurus Decimus
6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus
764c2c1e1c v0.16.13 2026-07-12 19:18:29 +02:00
Maurus Decimus
f73fefdd69 Fix: Reject invalid duration values (e.g. 1h30m) 2026-07-12 14:43:51 +02:00
Hugh Cole-Baker
448f735d55 Fix Store PostgreSQL channel binding (#3212)
The former behaviour to always use a SHA-256 hash of the server
certificate for the tls-server-end-point channel binding was
incorrect with regard to RFC5929, which specifies if the signature
algorithm uses a single hash function, that hash function should be
used, unless the signature algorithm uses MD5 or SHA-1, in which
case the channel binding should use an SHA-256 hash.

This change attempts to align with the behaviour of OpenSSL, used
by PostgreSQL, in using the signature algorithm's hash function.
2026-07-08 23:00:16 +02:00
Maurus Decimus
d368b53ca1 DMARCbis implementation 2026-07-05 16:34:57 +02:00
Maurus Decimus
94b33187a0 DKIM2 tests 2026-07-03 20:07:37 +02:00
Maurus Decimus
186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus
e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus
0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus
93b3b70616 Redis Sentinel support as an in-memory store and cluster coordinator backend (closes #2430) 2026-06-25 10:26:23 +02:00
Maurus Decimus
ab7d81e486 Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME (closes #161) 2026-06-25 09:53:07 +02:00
Maurus Decimus
9525a891f3 Bump to mail-auth 0.9.2 + minor schema fixes 2026-06-24 19:08:27 +02:00
Maurus Decimus
d1dd00558f S3: Support for allowInvalidCerts option to allow connecting to S3 endpoints with invalid TLS certificates 2026-06-24 14:21:11 +02:00
Maurus Decimus
df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus
94bea19f01 DANE: Improper TLSA record validation (#2328 - credits to @vdukhovni) 2026-06-21 15:23:53 +02:00
Maurus Decimus
d33c4afbc1 IMAP Extension for Object Identifiers (draft-ietf-mailmaint-imap-objectid-bis-04) 2026-06-21 11:29:27 +02:00
Maurus Decimus
0958d97925 International Domain Names (IDN) support (closes #207) 2026-06-20 09:02:26 +02:00
Maurus Decimus
ad47f03f48 DANE: Improper TLSA record validation (fixes #2328) 2026-06-19 17:14:26 +02:00
Maurus Decimus
0e004b5b56 Fix JMAP tests 2026-06-19 12:13:19 +02:00
Maurus Decimus
3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus
471254d324 Fix Registry: Object ids are parsed as numbers 2026-06-15 21:09:10 +02:00
Maurus Decimus
0d131afc03 Fix Autodiscover v2: Read email address from query parameters 2026-06-15 15:29:58 +02:00
Maurus Decimus
2cb765ed37 Fix CardDAV: Version requests included in address-data are ignored 2026-06-15 12:57:37 +02:00
Maurus Decimus
e07fb0a7c1 Use testcontainers for integration tests 2026-06-11 18:08:13 +02:00
Maurus Decimus
33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus
26f41f8aa7 v0.16.8 2026-06-06 18:46:25 +02:00
Maurus Decimus
0fdcdd4f87 Bump dependencies 2026-06-03 19:57:12 +02:00
Maurus Decimus
838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus
bea96cccfb v0.16.7 2026-05-28 17:34:08 +02:00
Maurus Decimus
ae4f21f6f3 Fix DNS updater: Keep external TXT records when updating RRSet 2026-05-28 16:23:15 +02:00
Maurus Decimus
4866cd331a Bump to dns-update 0.5.0 2026-05-23 19:20:25 +02:00
Maurus Decimus
777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus
d59ea4dfc4 v0.16.6 2026-05-20 08:35:02 +02:00
Maurus Decimus
2c4a504497 Add 58 new DNS provider integrations 2026-05-18 20:07:08 +02:00
Maurus Decimus
cf1d4e9141 Fix RFC2136 TSIG: regression related to multiplexer 2026-05-12 16:41:05 +02:00
Maurus Decimus
415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus
bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00
Maurus Decimus
015d437027 Bump mail-auth to 0.9 2026-05-05 19:41:15 +02:00
Maurus Decimus
175f34ea85 Fix JMAP Parsing ids containing digits in JSON Pointers 2026-05-05 18:17:49 +02:00
Maurus Decimus
ea32e5b9c3 Fix mail-parser panic with certain messages containing corrupted attachments 2026-05-02 09:17:36 +02:00
Maurus Decimus
9a575d9438 Timezone changes from the AccountSettings object return invalidProperties 2026-05-01 14:55:38 +02:00
Maurus Decimus
6757dd241f v0.16.3 2026-04-30 18:17:51 +02:00
Maurus Decimus
0b7492240b Fix log viewer: All events show as INFO. 2026-04-29 09:02:34 +02:00
Maurus Decimus
ed849e86ba v0.16.2 2026-04-28 16:11:49 +02:00
Maurus Decimus
3508476521 Bump dns-update to 0.2.5 2026-04-28 11:45:12 +02:00
Maurus Decimus
52733408dc Reduce minimum TLS certificate validity from 86400 to 3600 seconds 2026-04-24 20:18:38 +02:00
Maurus Decimus
e73b65c5a3 Box::pin authenticate function 2026-04-24 19:58:03 +02:00
Maurus Decimus
486636b2a7 Google DNS: Chunk TXT records when they exceed 255 characters 2026-04-23 16:22:51 +02:00
Maurus Decimus
275aea0b58 Bump dns-update 2026-04-22 09:30:57 +02:00