mirror of
https://github.com/sneakybugmaster/mailsender.git
synced 2026-11-10 19:48:49 +00:00
Claude
7c2fb0142e
mail.pgp.signing.type selects NONE (default), OPENPGP or SMIME, with one
key/certificate per From address.
- OPENPGP: plaintext copies become PGP/MIME multipart/signed (RFC 3156 s5,
detached signature over the exact content entity bytes); encrypted copies
are signed inside the encryption (combined method)
- SMIME: plaintext copies become S/MIME multipart/signed (RFC 8551, via
Bouncy Castle bcjmail); encrypted copies are S/MIME-signed, then
PGP/MIME-encrypted
- signed bodies are attached as raw bytes so they reach the wire unchanged;
shared MIME helpers move to MimeEntities
- keys are validated at startup (signing capability, address match,
validity, passphrase / key-certificate match)
- mail.pgp.signing.required refuses mail from addresses without a key
(MailSigningException); RELAY mode signs before handing over
- SendReport.signature(), metric tag signature, refused{cause}
- core test-jar shares key/certificate and verification helpers
- end-to-end tests verify signatures on the bytes received over SMTP
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G71TQ5jDETVwdUJxGAwaiT
53 lines
1.6 KiB
YAML
53 lines
1.6 KiB
YAML
spring:
|
|
main:
|
|
web-application-type: none
|
|
mail:
|
|
host: ${SMTP_HOST:localhost}
|
|
port: ${SMTP_PORT:587}
|
|
username: ${SMTP_USERNAME:}
|
|
password: ${SMTP_PASSWORD:}
|
|
properties:
|
|
mail.smtp.auth: ${SMTP_AUTH:true}
|
|
mail.smtp.starttls.enable: ${SMTP_STARTTLS:true}
|
|
mail.smtp.starttls.required: ${SMTP_STARTTLS:true}
|
|
mail.smtp.connectiontimeout: 10000
|
|
mail.smtp.timeout: 10000
|
|
|
|
mail:
|
|
pgp:
|
|
mode: ${MAIL_PGP_MODE:BUILT_IN} # BUILT_IN | RELAY
|
|
default-policy: ${MAIL_PGP_DEFAULT_POLICY:OPPORTUNISTIC}
|
|
mixed-mode: SPLIT
|
|
protected-headers: ${MAIL_PGP_PROTECTED_HEADERS:false}
|
|
# recipients:
|
|
# "[*@partner.example]": REQUIRE
|
|
# Readable sent copies: the sender's own PUBLIC key per From address.
|
|
# sender-keys:
|
|
# "[noreply@example.com]": file:/etc/mail/noreply.pub.asc
|
|
# Signing with the From address's key: NONE | OPENPGP | SMIME
|
|
signing:
|
|
type: ${MAIL_PGP_SIGNING_TYPE:NONE}
|
|
# openpgp:
|
|
# "[noreply@example.com]":
|
|
# key: file:/etc/mail/noreply.sec.asc
|
|
# passphrase: ${SIGNING_PASSPHRASE}
|
|
# smime:
|
|
# "[noreply@example.com]":
|
|
# keystore: file:/etc/mail/noreply.p12
|
|
# password: ${SMIME_PASSWORD}
|
|
relay:
|
|
host: ${RELAY_HOST:}
|
|
port: ${RELAY_PORT:587}
|
|
username: ${RELAY_USERNAME:}
|
|
password: ${RELAY_PASSWORD:}
|
|
policy-header: X-Encryption-Policy
|
|
|
|
demo:
|
|
to: ${DEMO_TO:test@thinhha.pro}
|
|
from: ${DEMO_FROM:${SMTP_USERNAME:}}
|
|
count: ${DEMO_COUNT:1}
|
|
|
|
logging:
|
|
level:
|
|
pro.thinhha.mailsender: DEBUG
|