Skip to content

docs(sieve): verify the MTA certificate on Sieve outbound mail - #277

Merged
0kaba0hub merged 1 commit into
mainfrom
docs/sieve-submission-tls-verify
Nov 5, 2026
Merged

0kaba0hub merged 1 commit into
mainfrom
docs/sieve-submission-tls-verify

Conversation

@0kaba0hub

Copy link
Copy Markdown
Contributor

Documents yarilo 2.4.7-dev.3 (yarilo#2526).

  • sieve_submission_ssl_verify (default true) and sieve_submission_ssl_ca in the settings data and the Sieve page table: the MTA certificate and name are verified for smtps and starttls; an empty CA means the system roots, an unreadable or empty CA file fails the send.
  • Sieve page: a "Verifying the MTA" section with the internal CA mounted at /etc/yarilo/internal-tls/ca.crt.
  • The login reaches yarilo-lmtp and yarilo-imap in both chart modes; the old sieve.submission.authSecret key stops the render.

Local: docs build, anchors, nofollow, img-alt and canonical checks pass. The settings comparison passes once develop CI refreshes the settings export after #2526.

sieve_submission_ssl_verify and sieve_submission_ssl_ca for smtps and
starttls, the login env in yarilo-lmtp and yarilo-imap, and the old
sieve.submission.authSecret key stopping the render.
@0kaba0

0kaba0 commented Nov 5, 2026

Copy link
Copy Markdown
Collaborator

#277 (d838556): APPROVED.

@0kaba0hub
0kaba0hub merged commit 0a726e2 into main Nov 5, 2026
1 check passed
@0kaba0hub
0kaba0hub deleted the docs/sieve-submission-tls-verify branch November 5, 2026 23:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants