Merge pull request #784 from w1ll1am23/ignore_smtp_certification_verification

Add env variable for bypassing certificate verification for SMTP

Author: crocodilestick

CONTRIBUTORS

@@ -325,6 +325,8 @@ Copyright (C) 2024-2025 Calibre-Web Automated contributors
 - chad3814 (2 commits)
 - coissac (2 commits)
 - FennyFatal (2 commits)
+- itsmarcy (2 commits)
+- JamesRy96 (2 commits)
 - sethvoltz (2 commits)
 - Strubbl (2 commits)
 - tecosaur (2 commits)

cps/tasks/mail.py

@@ -181,11 +181,15 @@ def run(self, worker_thread):
     def send_standard_email(self, msg):
         use_ssl = int(self.settings.get('mail_use_ssl', 0))
         timeout = 600  # set timeout to 5mins
+        use_unverified_context = os.getenv("SMTP_ALLOW_UNVERIFIED_SSL", "false").strip().lower() in ("1", "true", "yes", "on")
 
         # on python3 debugoutput is caught with overwritten _print_debug function
         log.debug("Start sending e-mail")
         if use_ssl == 2:
             context = ssl.create_default_context()
+            if use_unverified_context:
+                context.check_hostname = False
+                context.verify_mode = ssl.CERT_NONE
             self.asyncSMTP = EmailSSL(self.settings["mail_server"], self.settings["mail_port"],
                                        timeout=timeout, context=context)
         else:
@@ -196,6 +200,9 @@ def send_standard_email(self, msg):
             self.asyncSMTP.set_debuglevel(1)
         if use_ssl == 1:
             context = ssl.create_default_context()
+            if use_unverified_context:
+                context.check_hostname = False
+                context.verify_mode = ssl.CERT_NONE
             self.asyncSMTP.starttls(context=context)
         if self.settings["mail_password_e"]:
             self.asyncSMTP.login(str(self.settings["mail_login"]), str(self.settings["mail_password_e"]))