feat: display TLS certificate checks configuration in connectivity view

CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [2.20.0] - 2025-10-13
+
+This release fixes a bug that resulted in ephemeral loop getting stuck in infinite loop
+when trying to delete a message with unknown viewtype.
+
+### Fixes
+
+- Accept unknown viewtype in ephemeral loop.
+- Accept unknown viewtype in delete-old-messages loop.
+
 ## [2.19.0] - 2025-10-12
 
 ### Features / Changes
@@ -6910,3 +6920,4 @@ https://github.com/chatmail/core/pulls?q=is%3Apr+is%3Aclosed
 [2.17.0]: https://github.com/chatmail/core/compare/v2.16.0..v2.17.0
 [2.18.0]: https://github.com/chatmail/core/compare/v2.17.0..v2.18.0
 [2.19.0]: https://github.com/chatmail/core/compare/v2.18.0..v2.19.0
+[2.20.0]: https://github.com/chatmail/core/compare/v2.19.0..v2.20.0

Cargo.lock

@@ -1289,7 +1289,7 @@ dependencies = [
 
 [[package]]
 name = "deltachat"
-version = "2.19.0"
+version = "2.20.0"
 dependencies = [
  "anyhow",
  "async-broadcast",
@@ -1399,7 +1399,7 @@ dependencies = [
 
 [[package]]
 name = "deltachat-jsonrpc"
-version = "2.19.0"
+version = "2.20.0"
 dependencies = [
  "anyhow",
  "async-channel 2.5.0",
@@ -1421,7 +1421,7 @@ dependencies = [
 
 [[package]]
 name = "deltachat-repl"
-version = "2.19.0"
+version = "2.20.0"
 dependencies = [
  "anyhow",
  "deltachat",
@@ -1437,7 +1437,7 @@ dependencies = [
 
 [[package]]
 name = "deltachat-rpc-server"
-version = "2.19.0"
+version = "2.20.0"
 dependencies = [
  "anyhow",
  "deltachat",
@@ -1466,7 +1466,7 @@ dependencies = [
 
 [[package]]
 name = "deltachat_ffi"
-version = "2.19.0"
+version = "2.20.0"
 dependencies = [
  "anyhow",
  "deltachat",

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "deltachat"
-version = "2.19.0"
+version = "2.20.0"
 edition = "2024"
 license = "MPL-2.0"
 rust-version = "1.85"

deltachat-ffi/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "deltachat_ffi"
-version = "2.19.0"
+version = "2.20.0"
 description = "Deltachat FFI"
 edition = "2018"
 readme = "README.md"

deltachat-ffi/deltachat.h

@@ -7749,12 +7749,17 @@ void dc_event_unref(dc_event_t* event);
 /// Used in status messages.
 #define DC_STR_CHANNEL_LEFT_BY_YOU 200
 
+/// "Security"
+///
+/// Used in connectivity view.
+#define DC_STR_SECUREJOIN_WAIT_TIMEOUT 201
+
 /// "Scan to join channel %1$s"
 ///
 /// Subtitle for channel join qrcode svg image generated by the core.
 ///
 /// `%1$s` will be replaced with the channel name.
-#define DC_STR_SECURE_JOIN_CHANNEL_QR_DESC  201
+#define DC_STR_SECURE_JOIN_CHANNEL_QR_DESC  202
 
 /**
  * @}

deltachat-jsonrpc/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "deltachat-jsonrpc"
-version = "2.19.0"
+version = "2.20.0"
 description = "DeltaChat JSON-RPC API"
 edition = "2021"
 license = "MPL-2.0"

deltachat-jsonrpc/typescript/package.json

@@ -54,5 +54,5 @@
   },
   "type": "module",
   "types": "dist/deltachat.d.ts",
-  "version": "2.19.0"
+  "version": "2.20.0"
 }

deltachat-repl/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "deltachat-repl"
-version = "2.19.0"
+version = "2.20.0"
 license = "MPL-2.0"
 edition = "2021"
 repository = "https://github.com/chatmail/core"

deltachat-rpc-client/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deltachat-rpc-client"
-version = "2.19.0"
+version = "2.20.0"
 description = "Python client for Delta Chat core JSON-RPC interface"
 classifiers = [
     "Development Status :: 5 - Production/Stable",

deltachat-rpc-server/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "deltachat-rpc-server"
-version = "2.19.0"
+version = "2.20.0"
 description = "DeltaChat JSON-RPC server"
 edition = "2021"
 readme = "README.md"

deltachat-rpc-server/npm-package/package.json

@@ -15,5 +15,5 @@
   },
   "type": "module",
   "types": "index.d.ts",
-  "version": "2.19.0"
+  "version": "2.20.0"
 }

python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deltachat"
-version = "2.19.0"
+version = "2.20.0"
 description = "Python bindings for the Delta Chat Core library using CFFI against the Rust-implemented libdeltachat"
 readme = "README.rst"
 requires-python = ">=3.8"

release-date.in

@@ -1 +1 @@
-2025-10-12
+2025-10-13

src/ephemeral.rs

@@ -376,6 +376,10 @@ pub(crate) async fn start_chat_ephemeral_timers(context: &Context, chat_id: Chat
 /// `delete_device_after` setting or `ephemeral_timestamp` column.
 ///
 /// For each message a row ID, chat id, viewtype and location ID is returned.
+///
+/// Unknown viewtypes are returned as `Viewtype::Unknown`
+/// and not as errors bubbled up, easily resulting in infinite loop or leaving messages undeleted.
+/// (Happens when viewtypes are removed or added on another device which was backup/add-second-device source)
 async fn select_expired_messages(
     context: &Context,
     now: i64,
@@ -395,7 +399,11 @@ WHERE
             |row| {
                 let id: MsgId = row.get("id")?;
                 let chat_id: ChatId = row.get("chat_id")?;
-                let viewtype: Viewtype = row.get("type")?;
+                let viewtype: Viewtype = row
+                    .get("type")
+                    .context("Using default viewtype for ephemeral handling.")
+                    .log_err(context)
+                    .unwrap_or_default();
                 let location_id: u32 = row.get("location_id")?;
                 Ok((id, chat_id, viewtype, location_id))
             },
@@ -437,7 +445,11 @@ WHERE
                 |row| {
                     let id: MsgId = row.get("id")?;
                     let chat_id: ChatId = row.get("chat_id")?;
-                    let viewtype: Viewtype = row.get("type")?;
+                    let viewtype: Viewtype = row
+                        .get("type")
+                        .context("Using default viewtype for delete-old handling.")
+                        .log_err(context)
+                        .unwrap_or_default();
                     let location_id: u32 = row.get("location_id")?;
                     Ok((id, chat_id, viewtype, location_id))
                 },

src/login_param.rs

@@ -888,6 +888,22 @@ impl ConfiguredLoginParam {
             | ConfiguredCertificateChecks::AcceptInvalidCertificates2 => false,
         }
     }
+
+    /// Returns true if strict TLS checks are disabled
+    /// and configuration is not for a known provider
+    /// with broken TLS setup.
+    pub fn strict_tls_manually_disabled(&self) -> bool {
+        match self.certificate_checks {
+            ConfiguredCertificateChecks::OldAutomatic => {
+                // Old "Automatic" configuration defaults to no strict TLS.
+                // User should upgrade configuration.
+                self.provider.is_none()
+            }
+            ConfiguredCertificateChecks::Automatic | ConfiguredCertificateChecks::Strict => false,
+            ConfiguredCertificateChecks::AcceptInvalidCertificates
+            | ConfiguredCertificateChecks::AcceptInvalidCertificates2 => true,
+        }
+    }
 }
 
 #[cfg(test)]

src/scheduler/connectivity.rs

@@ -8,6 +8,7 @@ use humansize::{BINARY, format_size};
 use crate::events::EventType;
 use crate::imap::{FolderMeaning, scan_folders::get_watched_folder_configs};
 use crate::log::info;
+use crate::login_param::ConfiguredLoginParam;
 use crate::quota::{QUOTA_ERROR_THRESHOLD_PERCENTAGE, QUOTA_WARN_THRESHOLD_PERCENTAGE};
 use crate::stock_str;
 use crate::{context::Context, log::LogExt};
@@ -530,6 +531,36 @@ impl Context {
         }
         ret += "</ul>";
 
+        // =============================================================================================
+        // Add e.g.
+        //                              Security
+        //                                TLS Certificate Checks: enabled
+        // =============================================================================================
+
+        if let Some(configured_login_param) = ConfiguredLoginParam::load(self).await? {
+            let security = stock_str::security(self).await;
+            ret += &format!("<h3>{security}</h3><ul>");
+
+            ret += "<li>";
+            if configured_login_param.strict_tls() {
+                // GREEN: strict TLS checks are enabled.
+                ret += &format!(
+                    "<span class=\"green dot\"></span> <b>TLS Certificate Checks:</b> enabled"
+                );
+            } else if configured_login_param.strict_tls_manually_disabled() {
+                // RED: TLS checks are manually disabled.
+                ret += &format!(
+                    "<span class=\"red dot\"></span> <b>TLS Certificate Checks:</b> disabled"
+                );
+            } else {
+                // YELLOW: TLS checks are automatically disabled.
+                ret += &format!(
+                    "<span class=\"yellow dot\"></span> <b>TLS Certificate Checks:</b> disabled"
+                );
+            }
+            ret += "</li></ul>";
+        }
+
         // =============================================================================================
 
         ret += "</body></html>\n";

src/stock_str.rs

@@ -439,6 +439,10 @@ https://delta.chat/donate"))]
 
     #[strum(props(fallback = "Scan to join channel %1$s"))]
     SecureJoinBrodcastQRDescription = 201,
+
+    /// "Security" title for connectivity view section.
+    #[strum(props(fallback = "Security"))]
+    Security = 202,
 }
 
 impl StockMessage {
@@ -1324,6 +1328,11 @@ pub(crate) async fn backup_transfer_msg_body(context: &Context) -> String {
     translated(context, StockMessage::BackupTransferMsgBody).await
 }
 
+/// Stock string: `Security`.
+pub(crate) async fn security(context: &Context) -> String {
+    translated(context, StockMessage::Security).await
+}
+
 impl Context {
     /// Set the stock string for the [StockMessage].
     ///