fix: use Rustls NoCertificateVerification for underscore domains instead of AcceptInvalidCertificates

Remove AcceptInvalidCertificates overrides in configure.rs and qr.rs that
caused a fallback to OpenSSL/native-tls. The upstream Rustls TLS layer now
handles underscore-prefixed domains via NoCertificateVerification directly.
Also fix clippy lint in peer_channels.rs (map_or -> is_some_and).
This commit is contained in:
holger krekel
2026-03-02 13:00:16 +01:00
committed by link2xt
parent d14cbb1bd7
commit 5935d6ed9f
7 changed files with 14 additions and 22 deletions

View File

@@ -1018,7 +1018,7 @@ def test_configured_imap_certificate_checks(acfactory):
info = alice.get_info()
domain = alice.get_config("addr").split("@")[-1]
if domain.startswith("_"):
assert "cert_accept_invalid_certificates" in info.used_transport_settings
assert "cert_automatic" in info.used_transport_settings
else:
assert "cert_strict" in info.used_transport_settings