Allow users to turn off TLS verification or use their own certs

[ChristophWurst]

Feature Request

As of #2782 TLS host verification is enabled by default. Admins can only disable it system-wide. It would be nice to have a user setting to disable it per account, so you can still have other accounts verified.

Summary

Make it possible to disable TLS verification on a user/account based instead of system-wide.

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[beccon4]

If you want to return to the old insecure behavior, set app.mail.verify-tls-peer to true in config.php.<<
No - we have to set it to 0 (or false?) to get Mail to work with self signed certificates.

[ChristophWurst]

my bad. it should be set to false of course

[Cybnate]

Ensuring the PHP path for cert location is set correctly may also help to keep TLS on assuming you have a signed root certificate for your imap server:

php -r "print_r(openssl_get_cert_locations());"

By default this is different from the default location for root certificates in Ubuntu