- Bridge Node Support: Added functionality to manage mail (send/receive) on remote nodes via a bridge node. Full transparent management requires a private key on the bridge, while the remote node can operate with only a public key. - End-to-End Encryption (E2EE): Integrated E2EE using age. Encryption and decryption occur strictly at the bridge level; node administrators cannot access message content. - New Addressing Schema: Transitioned from nodepub@yggmail to userpub@nodepub. - Key Adaptation: Implemented ed25519 to x25519 coordinate adaptation, allowing signing keys to be used for encryption. Changed - Address Encoding: Switched from hex16 to base32 for the address space. - Memory Optimization: Replaced direct memory allocations with streaming for mail processing to reduce RAM overhead. - Code Refactoring: Performed decomposition of the original inherited codebase to improve maintainability. Fixed - Mail Updates: Fixed the mail retrieval mechanism to ensure near-instant updates for incoming messages. Changes to be committed: modified: .gitignore modified: README.md modified: cmd/yggmail/main.go modified: go.mod modified: go.sum new file: internal/account/manager.go new file: internal/account/session.go modified: internal/imapserver/backend.go modified: internal/imapserver/imap.go modified: internal/imapserver/mailbox.go modified: internal/imapserver/notify.go modified: internal/imapserver/user.go new file: internal/notify/notify.go new file: internal/notify/remote/remote.go new file: internal/remote/client.go new file: internal/remote/handlers.go new file: internal/remote/io.go new file: internal/remote/server.go new file: internal/remote/sign.go new file: internal/remote/types/request.pb.go new file: internal/remote/types/request.proto new file: internal/remote/types/response.pb.go new file: internal/remote/types/response.proto new file: internal/shell/shell.go modified: internal/smtpsender/sender.go modified: internal/smtpserver/backend.go modified: internal/smtpserver/session_local.go modified: internal/smtpserver/session_remote.go modified: internal/smtpserver/smtp.go new file: internal/storage/filestore/filestore.go new file: internal/storage/local/storage.go new file: internal/storage/remote/mail.go new file: internal/storage/remote/mailbox.go new file: internal/storage/remote/queue.go new file: internal/storage/remote/storage.go new file: internal/storage/remote/watch.go modified: internal/storage/sqlite3/sqlite3.go new file: internal/storage/sqlite3/table_accounts.go modified: internal/storage/sqlite3/table_mailboxes.go modified: internal/storage/sqlite3/table_mails.go modified: internal/storage/sqlite3/table_queue.go modified: internal/storage/storage.go modified: internal/storage/types/types.go modified: internal/utils/address.go new file: internal/utils/age/age.go new file: internal/utils/age/bech32/bech32.go new file: internal/utils/crypt.go new file: internal/utils/e2ee/crypt.go new file: internal/utils/e2ee/e2ee_test.go new file: internal/utils/e2ee/msg.go new file: internal/utils/x25519.go modified: internal/welcome/welcome.go
83 lines
1.9 KiB
Go
83 lines
1.9 KiB
Go
/*
|
|
* Copyright (c) 2021 Neil Alexander
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
package imapserver
|
|
|
|
import (
|
|
"log"
|
|
"net"
|
|
"time"
|
|
|
|
idle "github.com/emersion/go-imap-idle"
|
|
move "github.com/emersion/go-imap-move"
|
|
"github.com/emersion/go-imap/server"
|
|
"github.com/emersion/go-sasl"
|
|
)
|
|
|
|
type IMAPServer struct {
|
|
server *server.Server
|
|
backend *Backend
|
|
}
|
|
|
|
type tcpNoDelayListener struct {
|
|
net.Listener
|
|
}
|
|
|
|
func (l *tcpNoDelayListener) Accept() (net.Conn, error) {
|
|
conn, err := l.Listener.Accept()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if tcpConn, ok := conn.(*net.TCPConn); ok {
|
|
tcpConn.SetNoDelay(true)
|
|
tcpConn.SetKeepAlive(true)
|
|
tcpConn.SetKeepAlivePeriod(time.Second * 5)
|
|
}
|
|
return conn, nil
|
|
}
|
|
|
|
func NewIMAPServer(backend *Backend, addr string, insecure bool) (*IMAPServer, error) {
|
|
|
|
s := &IMAPServer{
|
|
server: server.New(backend),
|
|
backend: backend,
|
|
}
|
|
|
|
s.server.Addr = addr
|
|
s.server.AllowInsecureAuth = insecure
|
|
|
|
// s.server.Debug = func() io.Writer {
|
|
// return log.New(os.Stdout, "IMAP :", log.Default().Flags()).Writer()
|
|
// }()
|
|
s.server.Enable(idle.NewExtension())
|
|
s.server.Enable(move.NewExtension())
|
|
s.server.EnableAuth(sasl.Login, func(conn server.Conn) sasl.Server {
|
|
return sasl.NewLoginServer(func(username, password string) error {
|
|
_, err := s.backend.Login(nil, username, password)
|
|
return err
|
|
})
|
|
})
|
|
// go func() {
|
|
// if err := s.server.ListenAndServe(); err != nil {
|
|
// log.Fatal(err)
|
|
// }
|
|
// }()
|
|
go func() {
|
|
l, err := net.Listen("tcp", s.server.Addr)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
// Оборачиваем листенер в наш тюнингованный вариант
|
|
if err := s.server.Serve(&tcpNoDelayListener{l}); err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
}()
|
|
return s, nil
|
|
}
|