zig-smtp/src/ at dcc9aacdb3e292699661f9de2c6dc120ad2d1b4f · jcollie.dev/zig-smtp · Tangled

jcollie.dev / zig-smtp

0

An SMTP client and server library for Zig implementing RFC 5321.

0

zig-smtp / src

6 files

at dcc9aacdb3e292699661f9de2c6dc120ad2d1b4f

Jeffrey C. Ollie RFC review: standards list, doc links, exim-derived protocol gauntlet 13d ago

RFC review: standards list, doc links, exim-derived protocol gauntlet README gains a Standards section listing every implemented RFC with its per-side coverage (5321, 1870, 6152, 2920, 3207, 8314, 4954, 4616, 2195, draft-murchison-sasl-login, 3463/2034, 6531, and 8446 via tls.zig). Doc comments now link each RFC mention to the datatracker, with section fragments where a section is cited; authLogin's doc notes it has no RFC. The review surfaced two fixes: the server always emitted RFC 3463 enhanced status codes but never advertised ENHANCEDSTATUSCODES (RFC 2034) - now it does; and root.zig's module doc still called TLS an eventual feature. Also adds a protocol gauntlet unit test distilled from exim's test suite (test/scripts/0000-Basic, notably 0019's syntax-error dialogue and the 0008/0100 dotted message lines), asserting the exact 28-reply transcript and resulting envelope. The dialogue was first validated by running exim's own scriptable test client (test/src/client.c, built with zig cc) against zsmtp serve. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago

RFC review: standards list, doc links, exim-derived protocol gauntlet README gains a Standards section listing every implemented RFC with its per-side coverage (5321, 1870, 6152, 2920, 3207, 8314, 4954, 4616, 2195, draft-murchison-sasl-login, 3463/2034, 6531, and 8446 via tls.zig). Doc comments now link each RFC mention to the datatracker, with section fragments where a section is cited; authLogin's doc notes it has no RFC. The review surfaced two fixes: the server always emitted RFC 3463 enhanced status codes but never advertised ENHANCEDSTATUSCODES (RFC 2034) - now it does; and root.zig's module doc still called TLS an eventual feature. Also adds a protocol gauntlet unit test distilled from exim's test suite (test/scripts/0000-Basic, notably 0019's syntax-error dialogue and the 0008/0100 dotted message lines), asserting the exact 28-reply transcript and resulting envelope. The dialogue was first validated by running exim's own scriptable test client (test/src/client.c, built with zig cc) against zsmtp serve. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago

Add Exim interop tests; switch client TLS to tls.zig The VM test now also runs the zsmtp client against Exim (ports 2625/2626) over plaintext, STARTTLS, and implicit TLS, with taint-safe appendfile delivery checked in /var/spool/exim-mail. Exim exposed a standard-library TLS bug: std.crypto.tls.Client only advances its record-decryption state upon receiving the TLS 1.3 middlebox-compatibility ChangeCipherSpec record, which is optional and disabled by Exim's OpenSSL setup, so the handshake died with TlsUnexpectedMessage. The client-side Tls wrapper now uses ianic/tls.zig (already used server-side) instead: init is in-place (the connection holds interior pointers), and the flush-through workaround is gone since tls.zig flushes each record to the stream. A sendmail interop test was built and passing but removed again since nixpkgs does not package the sendmail MTA. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago

Add implicit TLS on the server side Server.Options.starttls becomes tls: ?TlsOptions with a mode field: .starttls keeps the RFC 3207 behavior (advertise, 220, upgrade, state reset) and .implicit performs the tls.zig server handshake before the greeting (SMTPS, port 465 style). Both paths share one upgradeToTls helper; in implicit mode STARTTLS is never advertised and the command gets 502. Breaking rename for Server.Options at version 0.0.0. The serve CLI grows --implicit-tls (requires --tls-cert/--tls-key) and its flag parser now supports valueless flags. Verified locally with openssl s_client (greeting arrives inside the TLS channel) and our own --tls client, plus a STARTTLS regression check. The VM interop test adds an implicit-TLS zsmtp server and a swaks --tlsc subtest against it; all 16 subtests pass. The Status list is complete: TLS in both modes on both sides, AUTH, streaming bodies, and MAIL parameter validation. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago

RFC review: standards list, doc links, exim-derived protocol gauntlet README gains a Standards section listing every implemented RFC with its per-side coverage (5321, 1870, 6152, 2920, 3207, 8314, 4954, 4616, 2195, draft-murchison-sasl-login, 3463/2034, 6531, and 8446 via tls.zig). Doc comments now link each RFC mention to the datatracker, with section fragments where a section is cited; authLogin's doc notes it has no RFC. The review surfaced two fixes: the server always emitted RFC 3463 enhanced status codes but never advertised ENHANCEDSTATUSCODES (RFC 2034) - now it does; and root.zig's module doc still called TLS an eventual feature. Also adds a protocol gauntlet unit test distilled from exim's test suite (test/scripts/0000-Basic, notably 0019's syntax-error dialogue and the 0008/0100 dotted message lines), asserting the exact 28-reply transcript and resulting envelope. The dialogue was first validated by running exim's own scriptable test client (test/src/client.c, built with zig cc) against zsmtp serve. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago

RFC review: standards list, doc links, exim-derived protocol gauntlet README gains a Standards section listing every implemented RFC with its per-side coverage (5321, 1870, 6152, 2920, 3207, 8314, 4954, 4616, 2195, draft-murchison-sasl-login, 3463/2034, 6531, and 8446 via tls.zig). Doc comments now link each RFC mention to the datatracker, with section fragments where a section is cited; authLogin's doc notes it has no RFC. The review surfaced two fixes: the server always emitted RFC 3463 enhanced status codes but never advertised ENHANCEDSTATUSCODES (RFC 2034) - now it does; and root.zig's module doc still called TLS an eventual feature. Also adds a protocol gauntlet unit test distilled from exim's test suite (test/scripts/0000-Basic, notably 0019's syntax-error dialogue and the 0008/0100 dotted message lines), asserting the exact 28-reply transcript and resulting envelope. The dialogue was first validated by running exim's own scriptable test client (test/src/client.c, built with zig cc) against zsmtp serve. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012HBHFhoTYa8TU9GLwobfbx

1 week ago