mirror of
https://github.com/webmin/webmin.git
synced 2026-10-30 07:01:10 +00:00
This patch fixes mail sending and SMTP monitoring silently continuing without encryption when STARTTLS is rejected. That fallback could expose passwords and email contents despite encryption being selected. Both paths now require a valid STARTTLS success response and stop on failure, while successful TLS and explicitly configured plaintext connections remain supported.
85 KiB
Executable File
85 KiB
Executable File