Conversation
feldsam
force-pushed
the
master
branch
2 times, most recently
from
October 19, 2021 10:03
bc1122c to
e0e1ed5
Compare
Support for PBKDF2-SHA512 hash algorithm in verify_hash() (FreeIPA compatibility) (issue 6646)
* [Web] Updated lang.fr-fr.json Co-authored-by: Keo <contact@kbl.netlib.re> * [Web] Updated lang.pt-pt.json Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> --------- Co-authored-by: Keo <contact@kbl.netlib.re> Co-authored-by: Germano Pires Ferreira <germanopires@gmail.com> Co-authored-by: Monika Bark <rychert.monika@wp.pl>
* Initial plan * Add MTA-STS support for alias domains Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Improve domain normalization and code style in mta-sts.php Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add error handling for idn_to_ascii in mta-sts.php Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add database error handling for alias domain query Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * Add ACME certificate support for MTA-STS on alias domains Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains. Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> * compose: bump image tag to 1.95 * Add MTA-STS DNS records display for alias domains in UI When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain. Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
- Remove HTTP Basic Authentication requirement from autodiscover.php - Extract email address from XML request body instead of AUTH headers - Validate mailbox existence and active status before returning config - Improve security by eliminating password transmission - Add comprehensive error handling for invalid/inactive mailboxes - Follow industry standards (Microsoft, Google, Apple) - Maintain backward compatibility with existing email clients - Keep full logging functionality in Redis AUTODISCOVER_LOG This change enhances security while improving user experience and follows modern email client configuration best practices.
- Replace hardcoded error IDs with random values (1-10 billion range) for better debugging - Cast SimpleXMLElement email to string before SQL query to prevent type errors - Qualify ambiguous 'active' column with table names in JOIN query - Add proper error XML response for database errors instead of die() - Ensure all error paths return complete XML documents
- Add view_autodiscover.sh helper script for testing autodiscover responses - Support -h/--help flag for usage information - Support -d/--domain flag to override autodiscover target (useful for testing) - Auto-detect xmllint availability for formatted output - Email validation with regex - Interactive mode if no email provided - Display response length for debugging
…event user enumeration
* [Web] Updated lang.zh-cn.json Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> --------- Co-authored-by: ガラスのような夢 <i@msdnicrosoft.work> Co-authored-by: Monika Bark <rychert.monika@wp.pl>
Signed-off-by: Stefan Morgenthaler <dev@morgenthaler.at>
* [Web] Updated lang.zh-cn.json Co-authored-by: 雨 <luotianyi@luotianyi.me> * [Web] Updated lang.pl-pl.json Co-authored-by: Monika Bark <rychert.monika@wp.pl> Co-authored-by: milkmaker <milkmaker@mailcow.de> --------- Co-authored-by: 雨 <luotianyi@luotianyi.me> Co-authored-by: Monika Bark <rychert.monika@wp.pl>
Co-authored-by: Sándor <me-github@sandros.hu>
…xity fix: Password for mobileconfig that conforms to password-complexity policy
Configurable displayName(s) - Fixes issue #6489
chore(deps): update dependency krakjoe/apcu to v5.1.28
chore(deps): update dependency imagick/imagick to v3.8.1
chore(deps): update dependency phpredis/phpredis to v6.3.0
…ns-from-autoprotocol-domains [Web] Disable login UI on autoprotocol domains
…memcached-3.x chore(deps): update dependency php-memcached-dev/php-memcached to v3.4.0
chore(deps): update dependency tianon/gosu to v1.19
fix: cors allowed origins settings validation
[Web] harden CORS origin matching and add Vary: Origin
[Rspamd] update to 4.1.4
Hardening mailcow
[Web] Move mailcow update check to server side
[Web] Create default mailbox template with eas and dav access
[ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain
Update 2026-07a
update README.md sponsors
* [Web] Updated lang.si-si.json Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> Co-authored-by: milkmaker <milkmaker@mailcow.de> * [Web] Updated lang.pt-br.json Co-authored-by: André Glazastov <andre@glazastov.com> --------- Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si> Co-authored-by: André Glazastov <andre@glazastov.com>
update README.md sponsors
[Clamd] Update to 1.4.6
[SOGo] Update to 5.12.10
[Dovecot] Remove legacy DeltaChat auto-filing sieve rule
[Redis] Update to 7.4.10
[Web] Minor hardening across web UI and nginx
Update 2026-07b
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.