jcoffey-dev
bda032d51d
The TLSA and MTA-STS types, the DANE certificate check, MTA-STS policy parsing and matching, and the DNSSEC lookups with the bogus-answer recheck move out of crates/smtp and crates/common into crates/outbound-tls (RL-30), so inbuxa-relay can deliver with the same code. The server keeps its caches, trace events, policy fetch and test mocks around them; its behavior is unchanged.
23 lines
867 B
TOML
23 lines
867 B
TOML
[package]
|
|
name = "inbuxa-outbound-tls"
|
|
description = "Outbound SMTP TLS policy: DANE (RFC 7672) with DNSSEC lookups, and MTA-STS (RFC 8461) policies. Shared by the server and inbuxa-relay (docs/spec/features/relay.md, RL-30)"
|
|
license = "AGPL-3.0-only OR LicenseRef-SEL"
|
|
version.workspace = true
|
|
edition = "2024"
|
|
|
|
# Small on purpose: inbuxa-relay links it, so no inbuxa server crate.
|
|
[dependencies]
|
|
mail-auth = { version = "0.13", default-features = false, features = ["aws-lc-rs"] }
|
|
rustls-pki-types = { version = "1", features = ["std"] }
|
|
rustls-webpki = { version = "0.103", default-features = false, features = ["std", "aws-lc-rs"] }
|
|
x509-parser = { version = "0.18" }
|
|
sha2 = "0.11"
|
|
serde = { version = "1.0", features = ["derive"] }
|
|
idna = "1.1"
|
|
|
|
[dev-dependencies]
|
|
tokio = { version = "1.53", features = ["rt-multi-thread", "macros"] }
|
|
|
|
[lints]
|
|
workspace = true
|