Use STARTTLS when sending emails
|Reported by:||Matt Molyneaux||Owned by:|
Currently MediaGoblin only has the option of using plain SMTP or SMTP over SSL (which has deprecated for some time now). Using STARTTLS is completely unsupported.
These changes address this issue by attempting to use the STARTTLS command after EHLO/HELO. By default it will carry on as normal if STARTTLS command is unavailable, this can be changed by setting
email_smtp_force_tls in the config.
Before this can be considered for merging there are two things that need to be taken care of:
- Unit test - I have no idea how to change
email_smtp_force_tlsat runtime, so I can't test this config option in both states.
- Documentation - I can't see where
email_smtp_*are documented. In particular, settings
email_smtp_force_tlsmight confuse users
Patches can be found on the "starttls" branch of this git repo: https://gitorious.org/mediagoblin/mediagoblin-starttls/commits/starttls