Majic Projects
Majic Ansible Roles
Go to the previous open issue
Go to the previous issue (open or closed)
star_faded.png
Please log in to bookmark issues
icon_project.png Majic Ansible Roles / Open Feature request MAR-231 Deploy proper TLS private key and certificate for SMTP service when using mail_forwarder role
action_vote_minus_faded.png
0
Votes
 action_vote_plus_faded.png
Go to the next issue (open or closed)
Go to the next open issue
Issue basics
  • Type of issue
    Feature request
  • Category
    Security
  • Targetted for
    Not determined
  • Status
    New
  • Progress
  • Priority
    Not determined
User pain
  • Type of bug
    Not triaged
  • Likelihood
    Not triaged
  • Effect
    Not triaged
Affected by this issue (0)
There are no items
People involved
Times and dates
  • Posted at
  • Last updated
  • Estimated time
    2 hours
  • Time spent
    No time spent
    Click here to see time logged against this issue
Issue details
Attachments (0)
There is nothing attached to this issue
Duplicate issues (0)
This issue does not have any duplicates
Show / hide more details »
Description

The mail_forwarder role deploys Postfix SMTP server configured to use locally-generated self-signed certificate. Instead of this, it would be useful to enforce deployment of proper private key and externally-issued server certificate.

The said certificate could then be used by connecting servers to validate the SMTP server's identity.

The following should be done:

  • Update the mail_forwarder role.
    • Add the smtp_tls_key and smtp_tls_certificate parameters for specifying the private key and corresponding certificate to be used for SMTP STARTTLS.
    • Make the parameters mandatory if incoming connections from the SMTP relay are allowed.
    • Make the parameters optional if possible if incoming connections from the SMTP relay are not allowed.
    • Consider enforcing STARTTLS for incoming SMTP connections.
  • Update role reference documentation.
  • Update usage instructions.
  • Update release notes.
Todos (0 / 0)
Options
There are no comments