Release Keila 0.14.3

Another attempt to fix STARTTLS issues: Only support TLSv1.2 since OTP isn't fully compliant with 1.3 yet
pentacent · Apr 22, 2024 · 8c3166b · 8c3166b
1 parent b2eeb4e
commit 8c3166b
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## Version 0.14.3
+
+## Fixed
+- Only support TLSv1.2 for STARTTLS SMTP Senders to avoid issues with
+  non-compliant TLSv1.3 implementation in OTP
+
 ## Version 0.14.2
 
 ## Improved

diff --git a/config/runtime.exs b/config/runtime.exs
@@ -104,7 +104,10 @@ if config_env() == :prod do
             if starttls? do
               config
               |> Keyword.put(:tls, :always)
-              |> Keyword.put(:tls_options, :tls_certificate_check.options(host))
+              |> Keyword.put(
+                :tls_options,
+                :tls_certificate_check.options(host) ++ [versions: [:"tlsv1.2"]]
+              )
             else
               config
             end

diff --git a/lib/keila/mailings/sender_adapters/smtp.ex b/lib/keila/mailings/sender_adapters/smtp.ex
@@ -48,7 +48,7 @@ defmodule Keila.Mailings.SenderAdapters.SMTP do
         opts
         |> Keyword.put(:tls, :always)
         |> Keyword.put(:tls_options, :tls_certificate_check.options(config.smtp_relay))
-        |> put_in([:tls_options, :versions], [:"tlsv1.2", :"tlsv1.3"])
+        |> put_in([:tls_options, :versions], [:"tlsv1.2"])
 
       true ->
         opts

diff --git a/mix.exs b/mix.exs
@@ -4,7 +4,7 @@ defmodule Keila.MixProject do
   def project do
     [
       app: :keila,
-      version: "0.14.2",
+      version: "0.14.3",
       elixir: "~> 1.15",
       elixirc_paths: elixirc_paths(Mix.env()),
       compilers: [:phoenix] ++ Mix.compilers(),