[PR #4385] [CLOSED] Finer SMTP TLS certificate control #16269

Closed
opened 2026-04-23 07:46:46 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/dani-garcia/vaultwarden/pull/4385
Author: @JosefSchoenberger
Created: 2/27/2024
Status: Closed

Base: mainHead: main


📝 Commits (2)

  • 4f5884d Add config for additional SMTP TLS root certs
  • 8399c54 Add config to disable system root cert store

📊 Changes

3 files changed (+43 additions, -1 deletions)

View changed files

📝 .env.template (+7 -0)
📝 src/config.rs (+28 -0)
📝 src/mail.rs (+8 -1)

📄 Description

This PR adds two new SMTP configurations regarding TLS:

  • SMTP_ADDITIONAL_ROOT_CERTS allows an admin to add new root certificates that Vaultwarden accepts for the SMTP server. This can be useful if the SMTP server only offers a self-signed certificate. Example: SMTP_ADDITIONAL_ROOT_CERTS=/etc/ssl/certs/mail1.pem;/etc/ssl/certs/mail2.pem
  • SMTP_USE_SYSTEM_ROOT_CERTS disables the system's root certificate store for TLS. This can be used in combination with SMTP_ADDITIONAL_ROOT_CERTS for certificate pinning.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/dani-garcia/vaultwarden/pull/4385 **Author:** [@JosefSchoenberger](https://github.com/JosefSchoenberger) **Created:** 2/27/2024 **Status:** ❌ Closed **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (2) - [`4f5884d`](https://github.com/dani-garcia/vaultwarden/commit/4f5884d28b84086ca92d293af27b00266b1d342c) Add config for additional SMTP TLS root certs - [`8399c54`](https://github.com/dani-garcia/vaultwarden/commit/8399c5470dd4bacf00a946154359eca22aedbc4a) Add config to disable system root cert store ### 📊 Changes **3 files changed** (+43 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.env.template` (+7 -0) 📝 `src/config.rs` (+28 -0) 📝 `src/mail.rs` (+8 -1) </details> ### 📄 Description This PR adds two new SMTP configurations regarding TLS: - `SMTP_ADDITIONAL_ROOT_CERTS` allows an admin to add new root certificates that Vaultwarden accepts for the SMTP server. This can be useful if the SMTP server only offers a self-signed certificate. Example: `SMTP_ADDITIONAL_ROOT_CERTS=/etc/ssl/certs/mail1.pem;/etc/ssl/certs/mail2.pem` - `SMTP_USE_SYSTEM_ROOT_CERTS` disables the system's root certificate store for TLS. This can be used in combination with `SMTP_ADDITIONAL_ROOT_CERTS` for certificate pinning. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-23 07:46:46 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#16269