modules/src/m_email/EMailTlsSetup.cpp, branch mainModules of GpgFrontend.http://git.bktus.com/gpgfrontend/modules/atom?h=main2026-09-19T10:01:05Zrefactor(modules): migrate to unified GFModule API2026-09-19T10:01:05Zsaturnericeric@bktus.com2026-09-19T10:01:05Zurn:sha1:a951c08beaf825d4ea47dd0806845c35d0ec2a91
- replace legacy module utility includes across module sources
- simplify bootstrap and translation registration macros
- update module headers to use the unified public interface
- replace secure object creation with SDK object factories
fix(email): isolate captured certificates per connection2026-09-13T11:10:12Zsaturnericeric@bktus.com2026-09-13T11:10:12Zurn:sha1:9c07f46ff1e2e181e3a50689a43bf3b769974013
- replace the process-global certificate slot with connection-owned state
- return the recording slot from TLS setup for failure handling
- pass captured state directly into each certificate verifier
- clarify test coverage claims for certificate verification ordering
style(email): standardize UI message punctuation2026-09-13T09:41:52Zsaturnericeric@bktus.com2026-09-13T09:41:52Zurn:sha1:0b6c250a63699107a51f34a85dd4297ae9d91913
- replace double-hyphen separators with natural punctuation
- simplify labels and descriptions for clearer readability
- use consistent spacing and separators across email views
- replace typographic ellipses with three-dot action labels
fix(email): harden mail delivery safeguards2026-09-12T22:10:32Zsaturnericeric@bktus.com2026-09-12T22:10:32Zurn:sha1:01c83b5803c5b4d09e12210ef44ed8f59f383687
- refuse overwriting accounts from newer schema versions
- preserve the resolved Sent folder in failure notifications
- ignore stale or stopped Sent-copy connection callbacks
- record certificate hostname validity and expiration details
fix(email): enforce SMTP auth and certificate pinning2026-09-12T14:47:48Zsaturnericeric@bktus.com2026-09-12T14:47:48Zurn:sha1:2245ab2011b64a04c45fca2f1d231ca2a6c96362
- require SMTP authentication when credentials are configured
- apply certificate pins to the presented leaf certificate
- preserve certificate validity and hostname verification
- correctly normalize vmime-provided SHA-256 fingerprints
- pass protocol context to TLS policy setup
- update connection test comments and formatting
fix(email): correct TLS certificate log placeholder2026-09-12T13:12:22Zsaturnericeric@bktus.com2026-09-12T13:12:22Zurn:sha1:5dea8fc39bb8ccde37dbeff86df3d63a6af356d4
- use the QString-style `%1` placeholder for formatted logging
- ensure the loaded certificate count appears without runtime warnings
feat(email): add secure outgoing mail transport2026-09-12T13:11:51Zsaturnericeric@bktus.com2026-09-12T13:11:51Zurn:sha1:7de0c4d27a08a8314d7906ef5df6a5dacc6a9c26
- add cancellable timeout handling for blocked vmime operations
- classify network, TLS, authentication, and SMTP failures
- preserve message bytes and safely build outgoing envelopes
- track ambiguous submissions to prevent duplicate retries
- enforce TLS, system trust roots, and certificate pinning
- add SMTP connection testing with secure password handling