mirror of
https://blitiri.com.ar/repos/chasquid
synced 2025-12-17 14:37:02 +00:00
fd9c6a748b
When the SMTP courier gets an error on STARTTLS (either because the command itself failed, or because there was a low-level TLS negotiation error), today we just fail that attempt. This can cause messages to never be delivered if the underlying reason is a server misconfiguration (e.g. a server certificate that Go cannot parse). This is quite rare in practice, but it can happen. To prevent this situation, this patch adds logic so that the SMTP courier retries over plaintext when STARTTLS fails. This is still subject to security level checks, so this type of failures cannot be used to downgrade connections to domains we successfully established a TLS connection previously. Note that certificate validation issues are NOT included in this type of failure, so they will not trigger a retry. The certificate validation handling is unchanged by this patch.
chasquid
chasquid is an SMTP (email) server with a focus on simplicity, security, and ease of operation.
It is designed mainly for individuals and small groups.
It's written in Go, and distributed under the Apache license 2.0.
Features
- Easy
- Easy to configure.
- Hard to mis-configure in ways that are harmful or insecure (e.g. no open relay, or clear-text authentication).
- Monitoring HTTP server, with exported variables and tracing to help debugging.
- Integrated with Debian, Ubuntu, and Arch.
- Supports using Dovecot for authentication.
- Useful
- Secure
- Tracking of per-domain TLS support, prevents connection downgrading.
- Multiple TLS certificates.
- Easy integration with Let's Encrypt.
- SPF and MTA-STS checking.
Documentation
The how-to guide and the installation guide are the best starting points on how to install, configure and run chasquid.
You will find all documentation here.
Contact
If you have any questions, comments or patches, please send them to the mailing
list,
chasquid@googlegroups.com.
To subscribe, send an email to chasquid+subscribe@googlegroups.com.
Security issues can be reported privately to albertito@blitiri.com.ar.
Bug reports and pull requests on GitHub are also welcome.
You can also reach out via IRC, #chasquid on OFTC.