[Users] [Bug 4568] New: Auto-accept updates of SSL certificates if valid and from same CA

[Milan Obuch]

On Thu, 3 Feb 2022 07:52:51 +0100
Johan Vromans <jvromans at squirrel.nl> wrote:

> On Wed, 02 Feb 2022 23:47:10 +0000, noreply at thewildbeast.co.uk wrote:
> 
> > Have an option to auto accept certificates that are exchanged
> > because old was close to expiry and new one is issued from the same
> > CA and valid.  
> 
> Seconded.
>

Claws Mail has easy-to-hack-on design, this request could be fullfilled
relatively easily (at the first glance).

If anybody wanting to get this enhancement request accepted and get
some work on it, I see basically three possibilities:

- hack on Claws' core
- create a plugin for this task
- use scripting plugin

I am not going to analyze pros and cons of these methods, I am just
going to work on the last one. As announced on this list two days ago,
there is a scripting plugin being developed by me, using Lua as its
scripting engine.

Basically, it uses hooks to get integrated into Claws Mail. This
mechanism is used in core for some functionality enhancements, often in
plugins. Second part of the plugin are table handler functions.

There is a hook prepared for task requested, SSLCERT_ASK_HOOKLIST, you
need just a function to use it... and I just added basic hook handler
into Lua plugin for this. It will take some time to check it properly,
I need to prepare testing environment with certificate regeneration,
some time is required for this.

If anybody can help with tests, which requires also building Claws from
sources, currently, please let me know.

Regards,
Milan