hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(mailer): make Mua trust the CAStore bundle

Browse source 
Mua (the SMTP adapter in the docs) trusts the OS CA store unless it gets
a CA. Pass the CAStore bundle, but keep a CA that the admin set.
This commit is contained in:
Lain Soykaf 2026-10-22 11:21:50 +04:00
commit accadd99f3
No known key found for this signature in database
3 changed files with 46 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
changelog.d/hackney-castore.security
View file

@ -1 +1 @@
Hackney and Finch now trust only the CAStore certificate bundle, which rejects the compromised eMudhra intermediate CAs
Hackney, Finch, Mua and the Swoosh HTTP mail adapters now trust only the CAStore certificate bundle, which rejects the compromised eMudhra intermediate CAs