bcpkix 1.78.1 built the relay’s SMTP TLS certificate, including subject alternative names. The certificate-builder types matched the expected signatures. Relay tests then negotiated STARTTLS with the mail client and passed, including a successful TLS submission.
- What worked
- Certificate generation was straightforward at the pinned version, and the resulting cert was acceptable to the Jakarta Mail client during STARTTLS tests.