zig-smtp/src/ at b7c0a5027edc21cc87fd55c450d852704c6709c2 · jcollie.dev/zig-smtp · Tangled

jcollie.dev / zig-smtp

0

An SMTP client and server library for Zig implementing RFC 5321.

0

zig-smtp / src

6 files

at b7c0a5027edc21cc87fd55c450d852704c6709c2

Jeffrey C. Ollie Add TLS support to client and server 14d ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago

Add TLS support to client and server Client (std.crypto.tls): - Tls.zig wraps std.crypto.tls.Client for implicit TLS and STARTTLS, verifying against the system trust store by default (caller-managed bundle and insecure modes available) - Client.starttls() does the RFC 3207 exchange; setTransport() swaps in the encrypted reader/writer - Tls.writer() is a flush-through wrapper: std's TLS writer encrypts on flush but leaves records in the stream writer's buffer, which deadlocks request/reply protocols like SMTP Server (ianic/tls.zig, pinned to zig-0.16.x head): - Options.starttls advertises and accepts STARTTLS (TLS 1.3 only): 220, server handshake over the raw stream, transport swap, RFC 3207 state reset; 503 on a second STARTTLS, close_notify on QUIT - tls dependency re-exported as zsmtp.tls for CertKeyPair loading CLI: send grew --tls/--starttls/--insecure, serve grew --tls-cert/--tls-key. Verified end to end over real sockets: zsmtp client <-> zsmtp server STARTTLS, openssl s_client -starttls smtp against the server, and openssl s_server against the client. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

2 weeks ago