This patch adds support for TLS-wrapped submission connections. Instead of clients establishing a connection over plain text and then using STARTTLS to switch over a TLS connection, this new mode allows the clients to connect directly over TLS, like it's done in HTTPS. This is not an official standard yet, but it's reasonably common in practice, and provides some advantages over the traditional submission port. The default port is 465, commonly used for this; chasquid defaults to systemd file descriptor passing as for the other protocols (for now).
29 lines
429 B
Plaintext
29 lines
429 B
Plaintext
account default
|
|
|
|
host testserver
|
|
port 1587
|
|
|
|
tls on
|
|
tls_trust_file config/certs/testserver/fullchain.pem
|
|
|
|
from user@testserver
|
|
|
|
auth on
|
|
user user@testserver
|
|
password secretpassword
|
|
|
|
account smtpport : default
|
|
port 1025
|
|
|
|
account subm_tls : default
|
|
port 1465
|
|
tls_starttls off
|
|
|
|
account baduser : default
|
|
user unknownuser@testserver
|
|
password secretpassword
|
|
|
|
account badpasswd : default
|
|
user user@testserver
|
|
password badsecretpassword
|