mahara-contributors team mailing list archive

[Mahara Bot <1896554@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/11321
Committed: https://git.mahara.org/mahara/mahara/commit/9f8e835ce64b02628f5a858d12f807d8a80109b8
Submitter: Cecilia Vela Gurovic (ceciliavg@xxxxxxxxxxxxxxx)
Branch:    20.10_STABLE

commit 9f8e835ce64b02628f5a858d12f807d8a80109b8
Author: Glenn Walbran <glennw@xxxxxxxxxxxxxxx>
Date:   Tue Sep 22 12:21:37 2020 +1200

Bug 1896554, allow mail sending via SMTP server with self signed
certificate

Mahara currently does not allow the secure sending of email via an external mail
server if it has a self signed certificate. This is because it fails the PHPMailer
checks on self-signed certs and peer verification.

Add options to allow this for email sending.

Change-Id: Iad7960b275aaad84fe5ac2c7cc420f54c00556cd
(cherry picked from commit f9bb86ff345de4bed5e118064e041e4c0519eebe)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1896554

Title:
  Cannot send email via SMTP server with self signed certificate

Status in Mahara:
  Fix Committed

Bug description:
  Mahara uses PHPMailer for sending emails. The default settings for
  PHPMailer are to disallow mail sending (with TLS) if the server has
  either a self signed certificate or if peer verification fails. This
  can also occur when using port 25 if the mail server is configured to
  require TLS to be started.

  In these cases the following mail options will allow the mail to be
  sent

  $mail->SMTPOptions = array(
      'ssl' => array(
          'verify_peer' => false,
          'verify_peer_name' => false,
          'allow_self_signed' => true
      )
  );

  To allow Mahara to be used with an external mail server in this case
  it is proposed to add the following configuration items:

  smtpallowselfsigned (default: false)
  smtpverifypeer (default: true)

  And the above ssl mail options would be set with these new options.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1896554/+subscriptions