Maurus Decimus
c105cff8fb
Fix CalDAV: calendar-query REPORT returns empty calendar-data for JMAP-created events
2026-07-19 21:27:01 +02:00
Maurus Decimus
6fb4d2b628
IMAP: Mailbox object-quota only enforced in JMAP
2026-07-19 07:52:31 +02:00
Maurus Decimus
764c2c1e1c
v0.16.13
2026-07-12 19:18:29 +02:00
Maurus Decimus
f73fefdd69
Fix: Reject invalid duration values (e.g. 1h30m)
2026-07-12 14:43:51 +02:00
Hugh Cole-Baker
448f735d55
Fix Store PostgreSQL channel binding ( #3212 )
...
The former behaviour to always use a SHA-256 hash of the server
certificate for the tls-server-end-point channel binding was
incorrect with regard to RFC5929, which specifies if the signature
algorithm uses a single hash function, that hash function should be
used, unless the signature algorithm uses MD5 or SHA-1, in which
case the channel binding should use an SHA-256 hash.
This change attempts to align with the behaviour of OpenSSL, used
by PostgreSQL, in using the signature algorithm's hash function.
2026-07-08 23:00:16 +02:00
Maurus Decimus
d368b53ca1
DMARCbis implementation
2026-07-05 16:34:57 +02:00
Maurus Decimus
94b33187a0
DKIM2 tests
2026-07-03 20:07:37 +02:00
Maurus Decimus
186d9feecb
DKIM2 verification
2026-07-01 16:20:02 +02:00
Maurus Decimus
e3c6f95bfd
Bump to mail-auth 0.11
2026-06-30 11:53:55 +02:00
Maurus Decimus
0eb08b9fb3
Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks
2026-06-25 19:24:10 +02:00
Maurus Decimus
93b3b70616
Redis Sentinel support as an in-memory store and cluster coordinator backend ( closes #2430 )
2026-06-25 10:26:23 +02:00
Maurus Decimus
ab7d81e486
Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME ( closes #161 )
2026-06-25 09:53:07 +02:00
Maurus Decimus
9525a891f3
Bump to mail-auth 0.9.2 + minor schema fixes
2026-06-24 19:08:27 +02:00
Maurus Decimus
d1dd00558f
S3: Support for allowInvalidCerts option to allow connecting to S3 endpoints with invalid TLS certificates
2026-06-24 14:21:11 +02:00
Maurus Decimus
df164e07c8
DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records
2026-06-22 23:13:45 +02:00
Maurus Decimus
94bea19f01
DANE: Improper TLSA record validation ( #2328 - credits to @vdukhovni)
2026-06-21 15:23:53 +02:00
Maurus Decimus
d33c4afbc1
IMAP Extension for Object Identifiers (draft-ietf-mailmaint-imap-objectid-bis-04)
2026-06-21 11:29:27 +02:00
Maurus Decimus
0958d97925
International Domain Names (IDN) support ( closes #207 )
2026-06-20 09:02:26 +02:00
Maurus Decimus
ad47f03f48
DANE: Improper TLSA record validation ( fixes #2328 )
2026-06-19 17:14:26 +02:00
Maurus Decimus
0e004b5b56
Fix JMAP tests
2026-06-19 12:13:19 +02:00
Maurus Decimus
3f2c5632b8
Fix OIDC: Add default domain name to groups that are not email addresses
2026-06-16 21:51:48 +02:00
Maurus Decimus
471254d324
Fix Registry: Object ids are parsed as numbers
2026-06-15 21:09:10 +02:00
Maurus Decimus
0d131afc03
Fix Autodiscover v2: Read email address from query parameters
2026-06-15 15:29:58 +02:00
Maurus Decimus
2cb765ed37
Fix CardDAV: Version requests included in address-data are ignored
2026-06-15 12:57:37 +02:00
Maurus Decimus
e07fb0a7c1
Use testcontainers for integration tests
2026-06-11 18:08:13 +02:00
Maurus Decimus
33f288d0ea
Fix JMAP: */changes methods leak ids of non-shared objects
2026-06-10 13:51:36 +02:00
Maurus Decimus
26f41f8aa7
v0.16.8
2026-06-06 18:46:25 +02:00
Maurus Decimus
0fdcdd4f87
Bump dependencies
2026-06-03 19:57:12 +02:00
Maurus Decimus
838a839290
OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change
2026-06-03 18:14:48 +02:00
Maurus Decimus
bea96cccfb
v0.16.7
2026-05-28 17:34:08 +02:00
Maurus Decimus
ae4f21f6f3
Fix DNS updater: Keep external TXT records when updating RRSet
2026-05-28 16:23:15 +02:00
Maurus Decimus
4866cd331a
Bump to dns-update 0.5.0
2026-05-23 19:20:25 +02:00
Maurus Decimus
777cf1252b
RateLimit header fields for HTTP
2026-05-23 11:41:43 +02:00
Maurus Decimus
d59ea4dfc4
v0.16.6
2026-05-20 08:35:02 +02:00
Maurus Decimus
2c4a504497
Add 58 new DNS provider integrations
2026-05-18 20:07:08 +02:00
Maurus Decimus
cf1d4e9141
Fix RFC2136 TSIG: regression related to multiplexer
2026-05-12 16:41:05 +02:00
Maurus Decimus
415036dd64
Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege
2026-05-12 15:47:32 +02:00
Maurus Decimus
bdba3f20e1
v0.16.5
2026-05-11 17:14:26 +02:00
Maurus Decimus
015d437027
Bump mail-auth to 0.9
2026-05-05 19:41:15 +02:00
Maurus Decimus
175f34ea85
Fix JMAP Parsing ids containing digits in JSON Pointers
2026-05-05 18:17:49 +02:00
Maurus Decimus
ea32e5b9c3
Fix mail-parser panic with certain messages containing corrupted attachments
2026-05-02 09:17:36 +02:00
Maurus Decimus
9a575d9438
Timezone changes from the AccountSettings object return invalidProperties
2026-05-01 14:55:38 +02:00
Maurus Decimus
6757dd241f
v0.16.3
2026-04-30 18:17:51 +02:00
Maurus Decimus
0b7492240b
Fix log viewer: All events show as INFO.
2026-04-29 09:02:34 +02:00
Maurus Decimus
ed849e86ba
v0.16.2
2026-04-28 16:11:49 +02:00
Maurus Decimus
3508476521
Bump dns-update to 0.2.5
2026-04-28 11:45:12 +02:00
Maurus Decimus
52733408dc
Reduce minimum TLS certificate validity from 86400 to 3600 seconds
2026-04-24 20:18:38 +02:00
Maurus Decimus
e73b65c5a3
Box::pin authenticate function
2026-04-24 19:58:03 +02:00
Maurus Decimus
486636b2a7
Google DNS: Chunk TXT records when they exceed 255 characters
2026-04-23 16:22:51 +02:00
Maurus Decimus
275aea0b58
Bump dns-update
2026-04-22 09:30:57 +02:00