Commit Graph

552 Commits

Author SHA1 Message Date
Maurus Decimus
186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus
e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus
0c8e567888 Fix OIDC: ECDSA private key support for SEC1 format. 2026-06-28 18:35:12 +02:00
Maurus Decimus
0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus
ab7d81e486 Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME (closes #161) 2026-06-25 09:53:07 +02:00
Maurus Decimus
14593e6f72 TLS: Update search index when file-backed certificates are refreshed 2026-06-23 17:58:04 +02:00
Maurus Decimus
46f03f7dad DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-23 11:09:43 +02:00
Maurus Decimus
df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus
097e3ffe94 Fix Cache: Invalidate negative email caches when an account is created 2026-06-20 09:38:59 +02:00
Maurus Decimus
0958d97925 International Domain Names (IDN) support (closes #207) 2026-06-20 09:02:26 +02:00
Maurus Decimus
cff46f26d4 ACME: reuseKey option to allow reusing private keys in renewals 2026-06-19 18:10:04 +02:00
Maurus Decimus
ad47f03f48 DANE: Improper TLSA record validation (fixes #2328) 2026-06-19 17:14:26 +02:00
Maurus Decimus
b1880c8670 HTTP: Add redirectRoot option to Http object 2026-06-17 19:30:36 +02:00
Maurus Decimus
8778e1bc45 OAuth client secret verification for confidential clients 2026-06-17 19:04:01 +02:00
Maurus Decimus
a6e1f97915 OAuth Profile for Open Public Clients 2026-06-17 18:04:46 +02:00
Maurus Decimus
c9e79025bc Remove OAuthConfig default 2026-06-17 11:41:55 +02:00
Maurus Decimus
3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus
8f627fbd69 ACME freshness check improvements 2026-06-16 11:17:13 +02:00
Maurus Decimus
4121518c4a ACME: Allow specifying a preferred certificate chain 2026-06-15 16:32:34 +02:00
Maurus Decimus
0d131afc03 Fix Autodiscover v2: Read email address from query parameters 2026-06-15 15:29:58 +02:00
Maurus Decimus
91f9e77934 Fix ACME: Add freshness check when renewing certificates 2026-06-15 15:19:14 +02:00
Maurus Decimus
6cfad95dfb Fix Sieve: Do not allow invalid certs in http_header function 2026-06-10 15:54:50 +02:00
Maurus Decimus
33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus
6f614b7904 Fix CalDAV/CardDAV: Calendar events, contacts, calendars and address books deleted via JMAP do not write a vanished tombstone 2026-06-06 11:51:47 +02:00
Maurus Decimus
d26e9b3d4e Fix MTA: Disabled aliases continue receiving messages 2026-06-06 10:48:48 +02:00
Maurus Decimus
19a942f67c Fix MTA: Sub-addressing with external directories returns 550 Mailbox not found 2026-06-06 09:36:35 +02:00
Maurus Decimus
0fdcdd4f87 Bump dependencies 2026-06-03 19:57:12 +02:00
Maurus Decimus
838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus
bea96cccfb v0.16.7 2026-05-28 17:34:08 +02:00
Maurus Decimus
ae4f21f6f3 Fix DNS updater: Keep external TXT records when updating RRSet 2026-05-28 16:23:15 +02:00
Maurus Decimus
57ab6bda0f Fix Directory: Per-domain external directory resolution fails 2026-05-26 21:17:14 +02:00
Maurus Decimus
9b72c0a32b Fix Sharing: Includes resource that themselves carry a direct ACL grant and are leaves 2026-05-25 16:21:57 +02:00
Maurus Decimus
e7f532ec6d Fix MTA: Always update next DSN notify times 2026-05-25 15:54:40 +02:00
Maurus Decimus
4866cd331a Bump to dns-update 0.5.0 2026-05-23 19:20:25 +02:00
Maurus Decimus
777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus
897d3c282c Perform DNS-01 authorizations sequentially to avoid race conditions in some DNS providers 2026-05-19 19:25:17 +02:00
Maurus Decimus
146ab3d39c Fix ACME: Update defaultCertificateId when renewing a certificate that is currently set as default 2026-05-19 17:00:18 +02:00
Maurus Decimus
190eecb7ee Skip v=spf1 a -all records for apex domains 2026-05-19 16:44:29 +02:00
Maurus Decimus
2c4a504497 Add 58 new DNS provider integrations 2026-05-18 20:07:08 +02:00
Maurus Decimus
d5a458992b Fix FileNode/query to return all results when no query is provided 2026-05-16 19:50:33 +02:00
Maurus Decimus
b556539f94 JMAP for File Storage improvements 2026-05-16 11:20:43 +02:00
Maurus Decimus
b9794315aa Bump JMAP File Storage to draft-ietf-jmap-filenode-13 2026-05-15 19:08:54 +02:00
Maurus Decimus
51e227c5cc Dns updater: Log DNS record types and values 2026-05-14 15:01:47 +02:00
Maurus Decimus
bf4d199606 Fix JMAP: Thread/get did not filter by per-mailbox ACLs on shared accounts 2026-05-12 16:05:45 +02:00
Maurus Decimus
415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus
bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00
Maurus Decimus
22e29d22cc Fix LDAP: Impersonation fails when the user has not logged in before 2026-05-10 13:13:27 +02:00
Maurus Decimus
b455951c11 Add is_ip_in_cidr expression function for CIDR matching 2026-05-08 09:21:21 +02:00
Maurus Decimus
d950bf5f56 Do not insert safe defaults during import/export 2026-05-08 08:16:53 +02:00
Maurus Decimus
52f366454b Fix ACME: Use the public suffix list to determine the zone name when no origin is provided 2026-05-07 15:55:13 +02:00