modules/src/m_email/EMailSmtpWorker.cpp, branch mainModules of GpgFrontend.http://git.bktus.com/gpgfrontend/modules/atom?h=main2026-09-19T10:01:05Zrefactor(modules): migrate to unified GFModule API2026-09-19T10:01:05Zsaturnericeric@bktus.com2026-09-19T10:01:05Zurn:sha1:a951c08beaf825d4ea47dd0806845c35d0ec2a91
- replace legacy module utility includes across module sources
- simplify bootstrap and translation registration macros
- update module headers to use the unified public interface
- replace secure object creation with SDK object factories
fix(tls): preserve certificates per connection2026-09-13T11:10:59Zsaturnericeric@bktus.com2026-09-13T11:10:59Zurn:sha1:a6e3fdada3a4201c912f16e31a48290517a66332
- attach the verifier's certificate details to connection errors
- prevent concurrent connections from overwriting certificate identity
- bound message fetching by both server claims and an application limit
- remove global certificate state clearing from IMAP and SMTP workers
fix(email): secure password lifetime handling2026-09-12T21:51:23Zsaturnericeric@bktus.com2026-09-12T21:51:23Zurn:sha1:8e392e6cc13b0da6ac3d02164983b5b35243ba40
- pass credentials through shared EMailSecret pointers
- erase secrets when the final holder is released
- avoid wiping detached QString copies during authentication
- use credential existence checks without loading secret contents
fix(email): scope cancellation to request sequence2026-09-12T21:34:30Zsaturnericeric@bktus.com2026-09-12T21:34:30Zurn:sha1:ca300dc16e8ed47bc3e03b3e312e8829c37b6a1b
- associate cancellation state with each operation sequence
- preserve queued stops until the targeted operation starts
- prevent stale cancellation state from affecting later requests
- reject cancelled IMAP and SMTP operations before network activity
fix(email): enforce SMTP auth and certificate pinning2026-09-12T14:47:48Zsaturnericeric@bktus.com2026-09-12T14:47:48Zurn:sha1:2245ab2011b64a04c45fca2f1d231ca2a6c96362
- require SMTP authentication when credentials are configured
- apply certificate pins to the presented leaf certificate
- preserve certificate validity and hostname verification
- correctly normalize vmime-provided SHA-256 fingerprints
- pass protocol context to TLS policy setup
- update connection test comments and formatting
feat(email): add secure outgoing mail transport2026-09-12T13:11:51Zsaturnericeric@bktus.com2026-09-12T13:11:51Zurn:sha1:7de0c4d27a08a8314d7906ef5df6a5dacc6a9c26
- add cancellable timeout handling for blocked vmime operations
- classify network, TLS, authentication, and SMTP failures
- preserve message bytes and safely build outgoing envelopes
- track ambiguous submissions to prevent duplicate retries
- enforce TLS, system trust roots, and certificate pinning
- add SMTP connection testing with secure password handling