Commit Graph

95 Commits

Author SHA1 Message Date
Maurus Decimus 4d7d71cb31 Fix Directory: Local group membership is cleared when the external directory is configured with a group claim or attribute that it does not return 2026-08-16 11:14:10 +02:00
Maurus Decimus ec86180c0f MTA queue and RocksDB improvements 2026-08-13 18:58:29 +02:00
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus bfac527732 Fix JMAP: Setting uploadTtl to 1ms triggers panic 2026-08-11 08:50:24 +02:00
Maurus Decimus 5cc9e10b00 IMAP: Implement UIDBATCHES, UIDONLY and MESSAGELIMIT extensions 2026-08-10 19:33:18 +02:00
Maurus Decimus 61dc779f98 Fix JMAP: EmailSubmission/query filtering on undoStatus contradicts EmailSubmission/get, reporting held FUTURERELEASE submissions as final instead of pending 2026-08-10 15:23:24 +02:00
Maurus Decimus 21ea8fe9be Spam filter: url_original expression variable for Url rules 2026-08-10 12:41:08 +02:00
Maurus Decimus 436deaf592 Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version= 2026-08-08 20:02:07 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus cf050ae5b0 S3: accessKey can now be read from an environment variable or file 2026-08-02 12:11:56 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus ce944c435c Fix Registry: Id references (e.g. #certificate-...) fail to resolve on defaultCertificateId, defaultAdminRoleIds, listenerIds and publicKey 2026-07-26 16:19:34 +02:00
Maurus Decimus 57b913d54e Fix Cache: Account caches silently discard entries larger than a single quick-cache shard, causing constant database rebuilds 2026-07-26 12:09:27 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 425d034ae7 Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push 2026-07-20 13:55:00 +02:00
Maurus Decimus 6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus 602025464b Fix Sieve: add Received headers to auto-generated messages and detect loops 2026-07-12 16:03:53 +02:00
Maurus Decimus f73fefdd69 Fix: Reject invalid duration values (e.g. 1h30m) 2026-07-12 14:43:51 +02:00
Maurus Decimus 2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus d368b53ca1 DMARCbis implementation 2026-07-05 16:34:57 +02:00
Maurus Decimus 94b33187a0 DKIM2 tests 2026-07-03 20:07:37 +02:00
Maurus Decimus 186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus 93b3b70616 Redis Sentinel support as an in-memory store and cluster coordinator backend (closes #2430) 2026-06-25 10:26:23 +02:00
Maurus Decimus ab7d81e486 Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME (closes #161) 2026-06-25 09:53:07 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus cff46f26d4 ACME: reuseKey option to allow reusing private keys in renewals 2026-06-19 18:10:04 +02:00
Maurus Decimus b1880c8670 HTTP: Add redirectRoot option to Http object 2026-06-17 19:30:36 +02:00
Maurus Decimus a6e1f97915 OAuth Profile for Open Public Clients 2026-06-17 18:04:46 +02:00
Maurus Decimus 3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus 471254d324 Fix Registry: Object ids are parsed as numbers 2026-06-15 21:09:10 +02:00
Maurus Decimus 4121518c4a ACME: Allow specifying a preferred certificate chain 2026-06-15 16:32:34 +02:00
Maurus Decimus 33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus 89ecee3bea Make SieveSystemInterpreter.defaultReturnPath and MtaQueueQuota.match optional expressions 2026-06-06 10:55:40 +02:00
Maurus Decimus 838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus 4866cd331a Bump to dns-update 0.5.0 2026-05-23 19:20:25 +02:00
Maurus Decimus 2c4a504497 Add 58 new DNS provider integrations 2026-05-18 20:07:08 +02:00
Maurus Decimus 7790645421 Bump JMAP File Storage to draft-ietf-jmap-filenode-14 2026-05-16 10:44:10 +02:00
Maurus Decimus 015d437027 Bump mail-auth to 0.9 2026-05-05 19:41:15 +02:00
Maurus Decimus fc3ea2b31a Fix JMAP Patching nested objects with values fails 2026-05-05 19:04:43 +02:00
Maurus Decimus 295cd7b127 Fix Registry: Allow changing object variants 2026-04-29 14:05:16 +02:00
Maurus Decimus c3366a91e7 LDAP: Generate valid credentialId when there are password changes 2026-04-28 15:32:00 +02:00
Maurus Decimus 3e07a0fb19 S3: Add verifyAfterWrite option to verify that objects have persisted after writing 2026-04-28 14:33:20 +02:00
Maurus Decimus a35e8b97e4 v0.16.1 2026-04-25 08:19:38 +02:00
Maurus Decimus 7d7832fd0f Allow hostnames without TLDs in remote server settings 2026-04-24 08:03:43 +02:00
Maurus Decimus 3ad4aa82cb v0.16.0 2026-04-20 17:50:58 +02:00
Maurus Decimus 1edd85486b Bootstrapping fixes 2026-04-20 16:35:21 +02:00
Maurus Decimus 47d21dd03d Updated imap defaults 2026-04-19 11:10:04 +02:00
Maurus Decimus af23099e35 Box large futures 2026-04-19 08:11:56 +02:00