search

jetmore / swaks

Swaks - Swiss Army Knife for SMTP
http://jetmore.org/john/code/swaks/
GNU General Public License v2.0
848 stars 86 forks source link

Deb Bug#883232 - swaks fails to report an error if --tls-verify is used and hostname doesn't match certificate #50

Closed jetmore closed 8 months ago

jetmore commented 2 years ago

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883232

I believe this will be fixed if I ever sort out the TLS rewrite, but confirm before next release

jetmore commented 2 years ago

sent email to the debbug address for the ticket "I believe this to be released in my develop branch (https://github.com/jetmore/swaks/blob/develop/swaks). Anyone want to try it out to confirm before I do a release?"

jetmore commented 8 months ago

sent to debbug

I believe this to be fixed, fixes will be in the next release (which will happen as soon as I sort out some other tls stuff)

--tls-verify does both cert and hostname verification
--tls-verify-ca can be used to verify just the signing
--tls-verify-host can be used to verify just the host
--tls-verify-target can be used to override (or set in the case of --pipe and --socket) the hostname used for verification.