No Option to disable SSL_VERIFICATION for email connection

[NanoPolymer]

Describe the bug
When using internal connections to a email server that has no valid certificate, the mail connection fails with the following error:

"Unable to connect with STARTTLS: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed"

To Reproduce
Steps to reproduce the behavior:

1. Set up a docker-version of "2FAuth" with configured mail-access to mail server that is using invalid cert
2. Click "Forgot your password? [Reset it]"
3. Enter valid email address
4. See error

Expected behavior
Add a docker-compose config line that disables certificate validation for email server certificates.

Screenshots

Desktop (please complete the following information):

• OS: Windows 10, Linux (Manjaro)
• Browser: Chromium, Firefox, Edge
• Version: newest

Additional context
This is only partly a bug, but because the feature missing is a gamebreaking bug for us, I used this template. Please move if you feel this should be a FR.

Thanks,
Lukas

[Bubka]

Hi.
It seems that the Laravel/Symphony Mailer can be configured not to verify peers. The line 'verify_peer' => false, must be added to the file [2fauth_install_dir]/config/mail.php like so:

    'mailers' => [
        'smtp' => [
            'transport' => 'smtp',
            'url' => env('MAIL_URL'),
            'host' => env('MAIL_HOST', 'smtp.mailgun.org'),
            'port' => env('MAIL_PORT', 587),
            'encryption' => env('MAIL_ENCRYPTION', 'tls'),
            'username' => env('MAIL_USERNAME'),
            'password' => env('MAIL_PASSWORD'),
            'timeout' => null,
            'local_domain' => env('MAIL_EHLO_DOMAIN'),
            'verify_peer' => false,
        ],

Can you please make the change and confirm it works so I can add it with an env var to ease its customization.

[NanoPolymer]

Hey,

this works.

I added the line, restarted the container, then mailing works.

Much appreciated,
Lukas

[Bubka]

The next container upgrade will reset your change. When this time comes, add the environment variable MAIL_VERIFY_SSL_PEER set to false to enable the setting back.