mail-server/crates
aszlig 1b1f85a156
acme: Don't restrict challenge types (#1522)
When testing my Stalwart deployment with Pebble[1], I got the following
ACME error:

  ACME error (acme.error) {
    reason = "unknown variant `dns-account-01`, expected one of `http-01`, `dns-01`, `tls-alpn-01` at line 15 column 33",
    details = JSON deserialization failed
  }

In RFC 8555 section 8[2], the validation challenges are meant to be
extensible:

> The identifier validation challenges described in this section all
> relate to validation of domain names. If ACME is extended in the
> future to support other types of identifiers, there will need to be
> new challenge types, and they will need to specify which types of
> identifier they apply to.

The mentioned error refers to the following draft:

https://datatracker.ietf.org/doc/html/draft-ietf-acme-dns-account-label-01

Pebble already implemented[3] this and while it's IMHO too early to
already support this in Stalwart, we should at least make sure that we
don't break existing deployments in case ACME CAs one day add more
challange types like the above.

[1]: https://github.com/letsencrypt/pebble
[2]: https://datatracker.ietf.org/doc/html/rfc8555#section-8
[3]: https://github.com/letsencrypt/pebble/pull/435

Signed-off-by: aszlig <aszlig@nix.build>
2025-05-25 10:43:59 +02:00
..
cli Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
common acme: Don't restrict challenge types (#1522) 2025-05-25 10:43:59 +02:00
dav Return correct DAV namespace for missing properties (closes #1545) 2025-05-25 10:21:34 +02:00
dav-proto Return correct DAV namespace for missing properties (closes #1545) 2025-05-25 10:21:34 +02:00
directory Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
email Train spam messages as ham when the sender is in the user's address book 2025-05-24 10:17:41 +02:00
groupware Train spam messages as ham when the sender is in the user's address book 2025-05-24 10:17:41 +02:00
http Fixed tests for FDB and SQL stores 2025-05-23 17:07:36 +02:00
http-proto Update cargo version to v0.12.0 2025-05-16 16:47:21 +02:00
imap Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
imap-proto Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
jmap Do not return change ids in PushSubscription/set 2025-05-23 13:09:25 +02:00
jmap-proto Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
main Updated README and CONTRIBUTING 2025-05-22 19:39:20 +02:00
managesieve Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
migration Updated CHANGELOG and UPGRADING 2025-05-22 16:22:57 +02:00
nlp Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
pop3 Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
services Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
smtp Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
spam-filter Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00
store Fixed tests for FDB and SQL stores 2025-05-23 17:07:36 +02:00
trc Add cluster orchestration support for Kafka and Zenoh 2025-05-21 17:33:24 +02:00
utils Bump open-telemetry to 0.29, tokio to 1.45 2025-05-21 15:49:26 +02:00