Finer SMTP TLS certificate control #1214

New Issue

MrUnknownDE · 2026-04-06T01:41:30+02:00

MrUnknownDE commented

2026-04-06 01:41:30 +02:00

Originally created by @JosefSchoenberger on 2/27/2024

This PR adds two new SMTP configurations regarding TLS:

SMTP_ADDITIONAL_ROOT_CERTS allows an admin to add new root certificates that Vaultwarden accepts for the SMTP server. This can be useful if the SMTP server only offers a self-signed certificate. Example: SMTP_ADDITIONAL_ROOT_CERTS=/etc/ssl/certs/mail1.pem;/etc/ssl/certs/mail2.pem
SMTP_USE_SYSTEM_ROOT_CERTS disables the system's root certificate store for TLS. This can be used in combination with SMTP_ADDITIONAL_ROOT_CERTS for certificate pinning.

*Originally created by @JosefSchoenberger on 2/27/2024* This PR adds two new SMTP configurations regarding TLS: - `SMTP_ADDITIONAL_ROOT_CERTS` allows an admin to add new root certificates that Vaultwarden accepts for the SMTP server. This can be useful if the SMTP server only offers a self-signed certificate. Example: `SMTP_ADDITIONAL_ROOT_CERTS=/etc/ssl/certs/mail1.pem;/etc/ssl/certs/mail2.pem` - `SMTP_USE_SYSTEM_ROOT_CERTS` disables the system's root certificate store for TLS. This can be used in combination with `SMTP_ADDITIONAL_ROOT_CERTS` for certificate pinning.

MrUnknownDE closed this issue

2026-04-06 01:41:30 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1214