Add the ability to configure allow self signed for tls smtp mail

popallo

Hi all.
Today I found myself unable to use my mail server with a self signed tls certificate and I did not find how to configure this in the options.
So I temporarily modified the file "/vendor/flarum/core/src/Mail/SmtpDriver.php" (yes I know, it's dirty) by adding this to the buildTransport () function:
$ transport-> setStreamOptions ([ 'ssl' => ['allow_self_signed' => true, 'verify_peer' => false, 'verify_peer_name' => false] ]);
I haven't found a "clean" way to do this.

So question: is it possible to do it?

Otherwise, suggestion: is it possible to add this in the email settings?

Don't throw tomato at me, it's on a development server and I didn't want to have a valid certificate on it: P

Thank you for your answers and for the development of this magnificent flarum 🙂

clarkwinkelmann

popallo hi. You could use a Flarum extension or some code in the local extend.php file to change this. I think you could register a new service provider that retrieve the transport driver out of the Laravel container and applies the same additional options, for example via the use of $app->resolving or $app->extend.

Does Laravel even allow this via their configuration file? That doesn't seem common enough for me to justify being added to core. But this could definitely be a community extension instead.

I suppose an alternative would be to register your own certificate authority in the bundled CA files used by PHP, which would make your mail server appear like any other secure server. That wouldn't require any change in Flarum at all.

popallo

clarkwinkelmann thank you for your answer, I will study the different possibilities that you talk about and I will come to provide a cleaner solution than the one I mentioned on my first post.

It seems that laravel allows it by adding this:

'stream' => [
             'ssl' => [
                 'allow_self_signed' => true,
                 'verify_peer' => false,
                 'verify_peer_name' => false,
             ],
],

I don't personally use laravel but just saw this config item on this stackoverflow post: https://stackoverflow.com/a/61588084