Re: mailfront new plugin API

--f61P+fpdnY2FZS1u
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 27, 2011 at 01:51:50AM -0400, Scott Gifford wrote:
> OK, I have this up and running for SMTP!

Excellent.  I was actually just going to do a release without it, and
work it into a later push.

> Here is a patch with a few changes:
>=20
>    - Implements "AUTH_REQUIRES_TLS" environment variable setting for
>    "plugin-cvm-authenticate.c", where authentication options are only off=
erred
>    after encryption is negotiated, preventing sending a password in plain=
text

Yeah, that's a good thing to work in.  The git source for
cvm-authenticate will disable the AUTH command if no mechanisms are
defined, but there's no good way to do the reverse -- enable a command
after init when the environment changes.  I don't want individual
commands to have to ever provide an "unimplemented" response.

>    - Fix missing newline after AUTH EHLO response

Fixed already in git, actually.

>    - After negotiating TLS, remove UCSPITLS from environment, so other
>    modules can tell TLS has been negotiated

I'd do this with a session variable with session_setnum or the like.

> I couldn't find a way to make it work with IMAP or POP3 though.  Is that
> something that you have planned, or something I should work on myself?

There is no support for plugins in either, so it'll have to be added in
in separately, probably using the source patch from Scott Gifford.

--=20
Bruce Guenter <[email protected]>                http://untroubled.org/

--f61P+fpdnY2FZS1u
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=S155
-----END PGP SIGNATURE-----

--f61P+fpdnY2FZS1u--