mirror of
https://github.com/hanzoai/mail.git
synced 2026-09-23 23:53:02 +00:00
zeekayandHanzo Dev
15909c7b79
Fork of github.com/mjl-/mox at 5656ca6d1b
(upstream v0.0.15 plus 55 commits).
Rename the module path in go.mod and the import paths in 268 Go files. Also
update the five scripts that "go install" the module (genwebsite.sh,
docker-release.sh, apidiff.sh, test-upgrade.sh, Dockerfile.release), which
would otherwise build upstream rather than this fork.
Add NOTICE recording the upstream project, author, license, and fork point,
and stating which license covers which files: MIT for the mox source and our
changes, MPL-2.0 for publicsuffix/public_suffix_list.txt alone, and the
vendored dependencies' own licenses under licenses/. Embed NOTICE so
"mail licenses" prints the lineage from the running binary. LICENSE.MIT,
LICENSE.MPLv2.0 and the licenses/ tree are preserved verbatim; no code is
relicensed.
The mox command name, config keys, data directory layout and website content
are unchanged. LLM.md records the fork point, the rename, what was left alone,
and the steps to stand the server up.
Co-authored-by: Hanzo Dev <[email protected]>
342 lines
9.5 KiB
Go
342 lines
9.5 KiB
Go
package message
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/hanzoai/mail/dns"
|
|
)
|
|
|
|
func TestAuthResultsPack(t *testing.T) {
|
|
dom, err := dns.ParseDomain("møx.example")
|
|
if err != nil {
|
|
t.Fatalf("parsing domain: %v", err)
|
|
}
|
|
authRes := AuthResults{
|
|
Hostname: dom.XName(true),
|
|
Comment: dom.ASCIIExtra(true),
|
|
Methods: []AuthMethod{
|
|
{"dkim", "", "pass", "", "", []AuthProp{{"header", "d", dom.XName(true), true, dom.ASCIIExtra(true)}}},
|
|
},
|
|
}
|
|
s := authRes.Header()
|
|
const exp = "Authentication-Results: (xn--mx-lka.example) møx.example;\r\n\tdkim=pass header.d=møx.example (xn--mx-lka.example)\r\n"
|
|
if s != exp {
|
|
t.Fatalf("got %q, expected %q", s, exp)
|
|
}
|
|
}
|
|
|
|
func TestAuthResultsParse(t *testing.T) {
|
|
ar, err := ParseAuthResults("(xn--mx-lka.example) møx.example;\r\n\tdkim=pass header.d=møx.example (xn--mx-lka.example)\r\n")
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "møx.example",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "møx.example"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const localhost = `localhost;
|
|
auth=pass smtp.mailfrom=mox+qvpVtG6ZQg-vJmN_beaGyQ@localhost
|
|
`
|
|
ar, err = ParseAuthResults(localhost)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "localhost",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "auth",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "mailfrom", IsAddrLike: true, Value: "mox+qvpVtG6ZQg-vJmN_beaGyQ@localhost"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const other = `komijn.test.xmox.nl;
|
|
iprev=pass (without dnssec) policy.iprev=198.2.145.102;
|
|
dkim=pass (2048 bit rsa, without dnssec) header.d=mandrillapp.com
|
|
header.s=mte1 header.a=rsa-sha256 header.b="CfNW8cht1/v3";
|
|
dkim=pass (2048 bit rsa, without dnssec) header.d=letsencrypt.org
|
|
header.s=mte1 header.a=rsa-sha256 header.b=F9lCi4OC77su
|
|
[email protected];
|
|
spf=pass (without dnssec) smtp.mailfrom=delivery.letsencrypt.org;
|
|
dmarc=pass (without dnssec) header.from=letsencrypt.org
|
|
`
|
|
|
|
ar, err = ParseAuthResults(other)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "komijn.test.xmox.nl",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "iprev",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "policy", Property: "iprev", Value: "198.2.145.102"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "mandrillapp.com"},
|
|
{Type: "header", Property: "s", Value: "mte1"},
|
|
{Type: "header", Property: "a", Value: "rsa-sha256"},
|
|
{Type: "header", Property: "b", Value: "CfNW8cht1/v3"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "letsencrypt.org"},
|
|
{Type: "header", Property: "s", Value: "mte1"},
|
|
{Type: "header", Property: "a", Value: "rsa-sha256"},
|
|
{Type: "header", Property: "b", Value: "F9lCi4OC77su"},
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "[email protected]"},
|
|
},
|
|
},
|
|
{
|
|
Method: "spf",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "mailfrom", Value: "delivery.letsencrypt.org"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dmarc",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "from", Value: "letsencrypt.org"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const google = `mx.google.com;
|
|
dkim=pass [email protected] header.s=2022b header.b="Z9k/yZIA";
|
|
spf=pass (google.com: domain of [email protected] designates 2a02:2770::21a:4aff:feba:bde0 as permitted sender) [email protected];
|
|
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=test.xmox.nl
|
|
`
|
|
|
|
ar, err = ParseAuthResults(google)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mx.google.com",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "@test.xmox.nl"},
|
|
{Type: "header", Property: "s", Value: "2022b"},
|
|
{Type: "header", Property: "b", Value: "Z9k/yZIA"},
|
|
},
|
|
},
|
|
{
|
|
Method: "spf",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "mailfrom", IsAddrLike: true, Value: "[email protected]"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dmarc",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "from", Value: "test.xmox.nl"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const yahoo = `atlas220.free.mail.bf1.yahoo.com;
|
|
dkim=perm_fail [email protected] header.s=2023a;
|
|
dkim=pass [email protected] header.s=2023b;
|
|
spf=pass smtp.mailfrom=ueber.net;
|
|
dmarc=pass(p=REJECT) header.from=ueber.net;
|
|
`
|
|
ar, err = ParseAuthResults(yahoo)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "atlas220.free.mail.bf1.yahoo.com",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "perm_fail",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "@ueber.net"},
|
|
{Type: "header", Property: "s", Value: "2023a"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "@ueber.net"},
|
|
{Type: "header", Property: "s", Value: "2023b"},
|
|
},
|
|
},
|
|
{
|
|
Method: "spf",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "mailfrom", Value: "ueber.net"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dmarc",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "from", Value: "ueber.net"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const proton0 = `mail.protonmail.ch; dkim=pass (Good
|
|
ed25519-sha256 signature) header.d=ueber.net [email protected]
|
|
header.a=ed25519-sha256; dkim=pass (Good 2048 bit rsa-sha256 signature)
|
|
header.d=ueber.net [email protected] header.a=rsa-sha256
|
|
`
|
|
ar, err = ParseAuthResults(proton0)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mail.protonmail.ch",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "ueber.net"},
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "[email protected]"},
|
|
{Type: "header", Property: "a", Value: "ed25519-sha256"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "ueber.net"},
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "[email protected]"},
|
|
{Type: "header", Property: "a", Value: "rsa-sha256"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const proton1 = `mail.protonmail.ch; dmarc=pass (p=reject dis=none)
|
|
header.from=ueber.net
|
|
`
|
|
ar, err = ParseAuthResults(proton1)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mail.protonmail.ch",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dmarc",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "from", Value: "ueber.net"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
const proton2 = `mail.protonmail.ch; spf=pass smtp.mailfrom=ueber.net
|
|
`
|
|
ar, err = ParseAuthResults(proton2)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mail.protonmail.ch",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "spf",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "mailfrom", Value: "ueber.net"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
const proton3 = `mail.protonmail.ch; arc=none smtp.remote-ip=84.22.96.237
|
|
`
|
|
ar, err = ParseAuthResults(proton3)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mail.protonmail.ch",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "arc",
|
|
Result: "none",
|
|
Props: []AuthProp{
|
|
{Type: "smtp", Property: "remote-ip", Value: "84.22.96.237"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
const proton4 = `mail.protonmail.ch; dkim=permerror (0-bit key) header.d=ueber.net
|
|
[email protected] header.b="a4SMWyJ7"; dkim=pass (2048-bit key)
|
|
header.d=ueber.net [email protected] header.b="mQickWQ7"
|
|
`
|
|
ar, err = ParseAuthResults(proton4)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "mail.protonmail.ch",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "permerror",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "ueber.net"},
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "[email protected]"},
|
|
{Type: "header", Property: "b", Value: "a4SMWyJ7"},
|
|
},
|
|
},
|
|
{
|
|
Method: "dkim",
|
|
Result: "pass",
|
|
Props: []AuthProp{
|
|
{Type: "header", Property: "d", Value: "ueber.net"},
|
|
{Type: "header", Property: "i", IsAddrLike: true, Value: "[email protected]"},
|
|
{Type: "header", Property: "b", Value: "mQickWQ7"},
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
const dkimReason = `host.example;
|
|
dkim=none reason="no dkim signatures"
|
|
`
|
|
ar, err = ParseAuthResults(dkimReason)
|
|
tcheck(t, err, "parsing auth results header")
|
|
tcompare(t, ar, AuthResults{
|
|
Hostname: "host.example",
|
|
Methods: []AuthMethod{
|
|
{
|
|
Method: "dkim",
|
|
Result: "none",
|
|
Reason: "no dkim signatures",
|
|
},
|
|
},
|
|
})
|
|
|
|
// Outlook adds an invalid line, missing required hostname at the start. And their
|
|
// dmarc "action=none" is invalid. Nothing to be done.
|
|
const outlook = `x; spf=pass (sender IP is 84.22.96.237)
|
|
smtp.mailfrom=ueber.net; dkim=pass (signature was verified)
|
|
header.d=ueber.net;dmarc=pass action=none header.from=ueber.net;compauth=pass
|
|
reason=100
|
|
`
|
|
_, err = ParseAuthResults(outlook)
|
|
if err == nil {
|
|
t.Fatalf("missing error while parsing authresults header from outlook")
|
|
}
|
|
}
|