feature #18778 [Mailer] [Smtp] Add DSN param peer_fingerprint for fingerprint verification (xdavidwu)

OskarStark · OskarStark · commit de3afac3c63d · 2023-09-28T15:20:58.000+02:00
This PR was merged into the 6.4 branch. Discussion ---------- [Mailer] [Smtp] Add DSN param `peer_fingerprint` for fingerprint verification Refs * symfony/symfony#51450 Commits ------- dbfcbb1 [Mailer][Smtp] Add DSN param `peer_fingerprint` for fingerprint verification
diff --git a/mailer.rst b/mailer.rst
@@ -334,6 +334,17 @@ the application or when using a self-signed certificate::
 
     $dsn = 'smtp://user:pass@smtp.example.com?verify_peer=0';
 
+TLS Peer Fingerprint Verification
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Additional fingerprint verification can be enforced with the ``peer_fingerprint``
+option. This is especially useful when a self-signed certificate is used and
+disabling ``verify_peer`` is needed, but security is still desired. Fingerprint
+may be specified in sha1 (40 characters) or md5 (32 characters)::
+
+    $dsn = 'smtp://user:pass@smtp.example.com?peer_fingerprint=6A1CF3B08D175A284C30BC10DE19162307C7286E';
+
+
 Overriding default SMTP authenticators
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
