Add option to disable SMTP SSL verify.

[neoark]

SMTP Exception>>
SMTP Error: Could not connect to SMTP host. Connection failed. stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:
error:0A000086:SSL routines::certificate verify failed

Hello,

I run a proton mail bridge. Please add an option to disable SSL verification on SMTP.

Thanks

 

[Rodolfo]

You can set the values directly in the database, you can also use the setting-update command.

CLI

Image and Video hosting software

v4-docs.chevereto.com

 

[neoark]

You can set the values directly in the database, you can also use the setting-update command.

CLI

Image and Video hosting software

v4-docs.chevereto.com

I don't see an option to disable SSL verification of the SMTP server when setting Email Mode to SMTP. Also please consider adding an open text box where I can enter a port for SMTP.

 

[Rodolfo]

Post in thread 'Chevereto v4.2.0 announcement'

Oct 8, 2024

✅ Added SMTP without credentials

In Chevereto v4.2.0, leaving the "SMTP username" and "SMTP password" fields empty will now disable SMTP authentication. This offers more flexibility for configuring email delivery settings, especially for servers that don't require authentication.

• Rodolfo

• 

 

[neoark]

Hello,

I am not sure what "Unsecured" means. With the proton bridge, SMTP is secured but with a self-signed certification. https://github.com/ProtonMail/proton-bridge


Reference: https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting

 

[Rodolfo]

I am not sure what "Unsecured" means.

It means that the connection lacks of a cipher layer, that the data flowing to the wire and network does it plain text format. It means thet your message is exposed to any party in the connection to see what's going on.

SMTP is an horrible protocol for email sending, it should be used only as a fallback. That's why we are dropping support for PHPMailer in favor of Symfony Mailer. In addition to the existing email sending options (SMTP and postfix), Chevereto v4.5 now supports the following providers: https://chevereto.com/community/threads/chevereto-v4-5-0-announcement.16324/page-2#post-79908

The dns setup I made for this implementation already checks for SSL, TLS and ?verify_peer=false when using "Unsecured".