Aaron Larisch
71718f3b05
Add ECDSA support
...
This is a squashed commit of the following:
commit db8051bc234c5fa67aa87a7a94f9e89eaf0e7dac
Merge: 2634fdf0 04020685
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue May 24 20:44:38 2022 +0200
Merge branch 'master' into add-ecdsa-support
commit 2634fdf0e942c50220d6ea22319610327bd4127e
Merge: 0962b90d 116c7919
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Nov 10 08:53:21 2021 +0100
Merge branch 'master' into add-ecdsa-support
commit 0962b90db51586b30a20d8c5310c1b09dbfe96e3
Merge: 61522713 d90d4f96
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Jun 9 11:33:34 2021 +0200
Merge branch 'master' into add-ecdsa-support
commit 61522713f1916ac8062fd7b717984d142a395c26
Merge: 72261e60 64264767
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Feb 26 18:20:30 2021 +0100
Merge branch 'master' into add-ecdsa-support
commit 72261e60f0c147287fb312c51982030f69674e6a
Merge: 3a1cce21 0846013e
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Dec 16 21:33:55 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 3a1cce2105b377410a4c4aff00d44db7fea76e85
Merge: 6a01796e c1034b89
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Sep 15 10:51:32 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 6a01796e7ecbae78b89a2067080886bb59a394a1
Merge: 812adb0f 9685b4b5
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Jul 21 14:07:56 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 812adb0fe1bdb5d5d832bcaf09c2c8543c71914b
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Jul 5 00:12:21 2020 +0200
Fix TLSA records for ECDSA and RSA certs in DNS diagnostics
Disables TLS 1.3 for the test connection to limit to RSA or ECDSA ciphers.
commit 83c976999bf1da178ed9363f79ff772f9bffab93
Merge: 6fb29ab5 becc5059
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Jul 4 23:03:45 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 6fb29ab554e55bac17fa3087da4580d224e95e6f
Merge: 3131e171 b933a309
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu May 21 11:34:30 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 3131e1717f48488a81979206df6d67e6f55c10a7
Merge: 1929216e 7fa10cc3
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Apr 16 18:20:39 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 1929216e6a8eff0a110bfc28425987c548e12fa0
Merge: a0edf841 a9947e99
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 21 08:38:07 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit a0edf841427b093b03597ba231e5c6b228c0ee60
Merge: 6152b426 b5c844d7
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Feb 13 13:52:09 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 6152b42616cfa9df483dee6047fdca2517b1b245
Merge: 85b791bf e6bb3069
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Jan 15 10:14:18 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 85b791bf07391217a1c00d957b6eb8eff091a7b0
Merge: c2339931 ff74b8aa
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Dec 17 15:21:10 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit c2339931c5c8ec646e1ae8ebc148b75f06c904dc
Merge: eee0238b 4e8b2bfc
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Dec 7 17:17:05 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit eee0238b6b9c97bcfae2b4183ade3575d0b97563
Merge: 9e1ff332 1d1a9a27
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Nov 8 12:53:51 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit 9e1ff332d163c9c2a9140bbe7388021a930dc759
Merge: ab164253 ea4da60c
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Nov 1 16:06:41 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit ab164253306e6bf696ef1cbf2235f2de3f05e9f5
Merge: c0499263 573e62f1
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Oct 31 13:57:01 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit c0499263455d49a807ff4d79b9d439dfd8e66137
Merge: 6a6d6c4a c4316150
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Oct 31 13:55:28 2019 +0100
Merge pull request #1 from mhofer117/tls-sni-ecdsa
Change line endings in functions.inc.php back to CRLF
commit c43161507bcb48750b865a657e6fe80c02812c83
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 19:02:17 2019 +0200
remove empty docker-entrypoint.sh
commit efd6cd1847f718900be72d20fa6361fda975bf1c
Merge: a2a0821a 6a6d6c4a
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 19:00:07 2019 +0200
Merge remote-tracking branch 'OpenLarry/add-ecdsa-support' into tls-sni-ecdsa
# Conflicts:
# data/Dockerfiles/acme/docker-entrypoint.sh
# data/conf/dovecot/dovecot.conf
# data/conf/nginx/site.conf
# data/conf/postfix/main.cf
# data/web/inc/ajax/dns_diagnostics.php
# data/web/inc/functions.inc.php
# docker-compose.yml
# generate_config.sh
# update.sh
commit a2a0821a38a55cb99ba1dd32383344ed6504f451
Merge: 4a62809d 05e7c958
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 18:50:16 2019 +0200
Merge branch 'tls-sni' into tls-sni-ecdsa
commit 4a62809d33d1ef88c09f89cf1168a1f01f578e6f
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sat Oct 19 13:04:02 2019 +0200
[SSL] add optional ecdsa certs in addition to rsa certs
commit 6a6d6c4a604cb5d310308e1adf1b709febe2460d
Merge: 351abd29 9f66b83a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Oct 1 11:01:28 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 351abd29b2f41f97a57681dccb042d9c2321498d
Merge: eddb2693 04853794
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Mon Sep 9 17:40:47 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit eddb26938d04dee6e2dd29ab65a3fefd1d07732d
Merge: 9d13ead4 6e82a359
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Aug 29 11:36:03 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 9d13ead450239a1408937e85aeed36afdd48631e
Merge: 478c4d1f f21cf134
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Aug 8 13:22:58 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 478c4d1f6364d60e58205656e8d0dd784ce0f088
Merge: 46dbf3bc 7665cc2a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Jun 27 14:49:09 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 46dbf3bc5e454b7bf74d1886f42e73b7d5b46d7b
Merge: 680a2726 69fb7f7a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri May 31 12:33:32 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 680a272664c451323dbc58f7dcbe17f96d387f1c
Merge: f69559f0 b20ff13e
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue May 7 12:29:34 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit f69559f03bd25752c2c526c1ac1b475a02508377
Merge: 3e8a9583 cd881652
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Mon Apr 15 12:55:41 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 3e8a9583826d8e413e3f21c12fef0e116ad11b54
Merge: 956a487f 4aae7277
Author: Aaron <OpenLarry@users.noreply.github.com>
Date: Mon Mar 18 16:52:37 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit 956a487f822580314186de7b0332e7f8ffaf289f
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Mar 17 12:34:56 2019 +0100
Set SKIP_ECDSA_CERT to y by default
commit 7103fe7e89b8ba8d45d59e65a6823c7c160565c4
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Mar 17 11:05:05 2019 +0100
Add SKIP_ECDSA_CERT config parameter
commit 91fca4fa3835f146571d9e5546c37fceffec2a42
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 16 18:48:28 2019 +0100
Show TLSA records for ECDSA certificates in DNS diagnostics
commit cc521b02501f03f692686f3dedc43339b342aa96
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 16 13:04:03 2019 +0100
Add ECDSA support
Co-authored-by: Marcel Hofer <m.hofer117@gmail.com>
2023-03-19 14:24:46 +01:00
macwinnie
b985ba4f0e
Improve send-as behaviour
...
Receiving mails for wildcard alias addresses is really easy – but
sending mails from those any-aliases was not possible at all unless
every sender address was added as an explicit alias to the database.
By this change in the database query for allowed sender addresses, the
first finding `not NULL` (see [`SELECT COALESCE`](https://www.w3schools.com/sql/func_sqlserver_coalesce.asp ) for how it works)
– either an exact alias `mailbox@domain.tld` or the wildcard alias `@domain.tld`
will be allowed to send mails as the given address ... without the need
of explicit definition within the database.
2022-08-04 01:37:26 +02:00
andryyy
82f4f1fd15
[Postfix] Lookup credentials for user-specific sender transports
2021-08-17 16:51:06 +02:00
andryyy
68f9ca8cb0
[Postfix] Remove broken SASL access map, moved to Dovecot LUA authentication
2021-06-08 13:13:49 +02:00
andryyy
51e3521aac
[Postfix] Remove smtpd_last_auth service; replaced by SASL logging in Dovecot LUA auth process
2021-06-04 14:29:28 +02:00
andryyy
8a83587800
[Postfix] Finally here: MX based transport map routing; Sorry it took years, Patrik
...
[Web] Small fixes
2021-05-28 10:40:41 +02:00
andryyy
5065667ae4
[Postfix] Allow to set and override a relayhost per mailbox
...
[Web] Replace recycle icon with trash (this one made me a bit sad)
[Web] Various small fixes
[Web] Allow or disallow a domain admin to change relayhost settings (default is off, as previous default)
2021-05-26 14:02:27 +02:00
andryyy
dbede2252c
[Ejabberd, Postfix, Dovecot] Do not run DNS check against unbound
2021-04-01 15:24:55 +02:00
ValdikSS
9c559680a6
Add postscreen whitelist syntax and examples ( #3931 )
2021-01-11 19:23:32 +01:00
andryyy
ea98ac6442
[Postfix] Do not create a TLS SNI map when SKIP_LETS_ENCRYPT=y
2021-01-08 12:39:40 +01:00
andryyy
835c4eebb8
[Postfix] Fix HELO name
2020-12-09 14:41:19 +01:00
andryyy
836ea1508e
[Postfix] Fix smtp last login on replicated setups
2020-09-28 16:23:49 +02:00
andryyy
85b027aa9d
[Postfix] Merge syslog filters
...
[Postfix] Create sasl_access map; Use JSON_VALUE and remove unnecessary like command
2020-09-17 19:48:04 +02:00
andryyy
bffa3d962a
[Postfix] Test DNS against mailcow.email
2020-07-11 13:31:48 +02:00
andryyy
ab5d78f675
[Postfix] Fix "disallow login": A catch-all will not catch mail for mailboxes with disallowed login
2020-06-06 01:12:31 +02:00
andryyy
3459c13022
[Postfix] Implement disallowed logins
2020-04-29 11:00:00 +02:00
andryyy
ef0b40085b
[Postfix] Allow to relay only non-local mailboxes
2020-04-03 20:39:53 +02:00
andryyy
06df5f3017
[Postfix] Added custom_postscreen_whitelist.cidr for a custom Postscreen wl, fixes #3313
2020-02-06 08:28:48 +01:00
andryyy
c75fd9ac40
[Postfix] Wait for DNS
2019-11-26 21:09:12 +01:00
andryyy
e1fdbba0f7
[Postfix] Add custom_transport.pcre
2019-11-12 20:44:43 +01:00
Marcel Hofer
2e35da6816
[SSL] create individual domain certificates, add SNI configs for Postfix/Dovecot/Nginx
2019-10-19 12:48:56 +02:00
andryyy
a1cd7d8ee7
[Postfix] Add watchdog@localhost alias
2019-09-04 23:06:29 +02:00
andryyy
b4f159da86
[Postfix] Allow to create an extra.cf file besides main.cf to merge overrides
...
[Postfix] Better logging while bootstrapping
[Postfix] Stop container, when a service fails (easier to monitor)
2019-09-02 18:37:05 +02:00
andryyy
3136e020f6
[Postfix] Remove Zeyple, base on Buster
2019-08-09 14:08:58 +02:00
andryyy
2898aa6918
[Postfix] Remove unused alias domain catch all map
2019-07-13 08:59:32 +02:00
andryyy
b139e48eec
Add some hints to autogenerated files
2019-07-08 07:56:41 +02:00
andryyy
e25e9c7b40
[Postfix] Create resource maps
2019-06-09 16:49:38 +02:00
andryyy
b6d9fbf747
[Postfix] Fix Postfix map
2019-03-09 12:30:36 +01:00
andryyy
15970ab8dc
[Postfix] Fix sasl_passwd query from alias domain, fixes #2410
...
[Web] Major fix, added a line break!
[Compose] Update Postfix image
2019-03-09 11:22:39 +01:00
Michael Kuron
0974a5fb60
Fix transport map authentication with multiple identical nexthops
2018-12-25 15:02:50 +01:00
andryyy
8f686c1543
[Postfix] Split sasl passwd maps to not lookup sender_dependent_default_transport_maps auth info when querying for transport_maps
2018-12-19 09:38:56 +01:00
andryyy
a4452ed3a5
[Postfix] Important fix for mailbox maps, fixes #2013
2018-11-15 22:55:45 +01:00
andryyy
9ee557e5a5
[Postfix] Adjust mailbox query
2018-11-12 09:49:52 +01:00
André
23e6e52f4f
[Postfix] Proper permissions for sql config files
...
[Dovecot] Proper permissions for sql config files
2018-10-12 10:57:00 +02:00
André
c6aa3610f0
[Postfix] Enable/create smtp_tls_policy_maps
2018-10-04 14:34:53 +02:00
André
0fb43f4916
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
...
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
André
bdf7632757
[Postfix] Add '*' as send_as to sender_acl map
...
[Postfix] Syslog-ng: Do not trim after each push to Redis
2018-08-02 12:15:04 +02:00
André
15b80760b2
[Postfix] Add scripts to learn from spam/ham traps
...
[Dovecot] Learn fuzzy when moving mails from/to junk
2018-07-29 00:36:08 +02:00
André
ef8c79c0e5
[Postfix] Fix alias for spam and ham addresses
2018-07-25 01:21:22 +02:00
André
63ce1ba2d6
[Postfix] Create ham/spam mailboxes @ localhost
2018-07-25 01:05:51 +02:00
André Peters
0553dc5959
[Postfix] Fix query
2018-02-27 15:02:31 +01:00
André Peters
39f289fc3c
[Web, Dovecot, Postfix] Fix JSON attribute for login
2018-02-19 10:17:29 +01:00
André Peters
ab720bf164
[Web, Postfix] Move TLS policy to mailbox attributes
2018-02-17 11:12:16 +01:00
André Peters
2bdc3f94c0
[Web] Database schema test
2018-02-17 09:50:58 +01:00
Michael Kuron
e86565e283
Expose Postfix's recipient_canonical_maps through web UI
2018-01-23 20:02:31 +01:00
andre.peters
8d56534e76
[Postfix] Don't try to authenticate to relayhosts without username, fixes #725
2017-12-25 10:18:49 +01:00
andre.peters
52f4f850cf
[Postfix] Fix missing authentication data for relayhosts when sender domain is alias domain
2017-12-17 17:45:12 +01:00
André
ade4b9e7ae
[Postfix, Web] Feature: BCC maps
2017-11-19 15:13:43 +01:00
andryyy
e107cbef5e
[Postfix] Fix sending as alias, when alias is in alias domains, cleanup
2017-10-11 11:22:52 +02:00
andryyy
4d7bb26874
[Postfix] Add null rcpt for watchdog
2017-09-01 12:22:29 +02:00