Merge branch '6.4' into 7.0

* 6.4:
  Fix CS
  [Workflow] deprecate `GuardEvent::getContext` method
  Update the list of sponsors for Symfony 6.4 🙏
  [AssetMapper] Improve exception message when a downloaded asset is not found
  [Mailer][Smtp] Add DSN param `peer_fingerprint` for fingerprint verification
  [Webhook][RemoteEvent] Add Sendgrid symfony#50704

Author: fabpot

CHANGELOG.md

@@ -6,6 +6,11 @@ CHANGELOG
 
  * Remove the OhMySmtp bridge in favor of the MailPace bridge
 
+6.4
+---
+
+ * Add DSN parameter `peer_fingerprint` to verify TLS certificate fingerprint
+
 6.3
 ---
 

Tests/Transport/Smtp/EsmtpTransportFactoryTest.php

@@ -109,6 +109,23 @@ public static function createProvider(): iterable
             $transport,
         ];
 
+        $transport = new EsmtpTransport('example.com', 465, true, null, $logger);
+        /** @var SocketStream $stream */
+        $stream = $transport->getStream();
+        $streamOptions = $stream->getStreamOptions();
+        $streamOptions['ssl']['peer_fingerprint'] = '6A1CF3B08D175A284C30BC10DE19162307C7286E';
+        $stream->setStreamOptions($streamOptions);
+
+        yield [
+            new Dsn('smtps', 'example.com', '', '', 465, ['peer_fingerprint' => '6A1CF3B08D175A284C30BC10DE19162307C7286E']),
+            $transport,
+        ];
+
+        yield [
+            Dsn::fromString('smtps://:@example.com?peer_fingerprint=6A1CF3B08D175A284C30BC10DE19162307C7286E'),
+            $transport,
+        ];
+
         $transport = new EsmtpTransport('example.com', 465, true, null, $logger);
         $transport->setLocalDomain('example.com');
 

Transport/Smtp/EsmtpTransportFactory.php

@@ -29,17 +29,21 @@ public function create(Dsn $dsn): TransportInterface
 
         $transport = new EsmtpTransport($host, $port, $tls, $this->dispatcher, $this->logger);
 
-        if ('' !== $dsn->getOption('verify_peer') && !filter_var($dsn->getOption('verify_peer', true), \FILTER_VALIDATE_BOOL)) {
-            /** @var SocketStream $stream */
-            $stream = $transport->getStream();
-            $streamOptions = $stream->getStreamOptions();
+        /** @var SocketStream $stream */
+        $stream = $transport->getStream();
+        $streamOptions = $stream->getStreamOptions();
 
+        if ('' !== $dsn->getOption('verify_peer') && !filter_var($dsn->getOption('verify_peer', true), \FILTER_VALIDATE_BOOL)) {
             $streamOptions['ssl']['verify_peer'] = false;
             $streamOptions['ssl']['verify_peer_name'] = false;
+        }
 
-            $stream->setStreamOptions($streamOptions);
+        if (null !== $peerFingerprint = $dsn->getOption('peer_fingerprint')) {
+            $streamOptions['ssl']['peer_fingerprint'] = $peerFingerprint;
         }
 
+        $stream->setStreamOptions($streamOptions);
+
         if ($user = $dsn->getUser()) {
             $transport->setUsername($user);
         }