view release on metacpan or  search on metacpan

scripts/mailmake  view on Meta::CPAN

=back

=head2 SMTP Delivery

=over 4

=item B<--smtp-host>, B<-H> HOST

SMTP server hostname or IP address.

=item B<--smtp-port>, B<-P> PORT

SMTP port. Defaults to 25 (plain), 587 (STARTTLS), or 465 (SMTPS/TLS).

=item B<--smtp-user>, B<-U> USERNAME

Login name for SMTP authentication (SASL PLAIN/LOGIN).

Requires L<Authen::SASL>.

=item B<--smtp-password> PASSWORD

Password for SMTP authentication.

=item B<--smtp-starttls>

Upgrade the connection to TLS using STARTTLS (typically port 587).

=item B<--smtp-tls>

Use direct TLS from the start (SMTPS, typically port 465).

=item B<--smtp-timeout> SECONDS

Connection and command timeout. Default: 30.

=back

=head2 OpenPGP (requires C<gpg> / C<gpg2> and L<IPC::Run>)

OpenPGP options cannot be combined with S/MIME options.

=over 4

=item B<--gpg-sign>

Sign the message (RFC 3156 C<multipart/signed> with detached ASCII signature).

=item B<--gpg-encrypt>

Encrypt the message (RFC 3156 C<multipart/encrypted>).

C<--gpg-sign> and C<--gpg-encrypt> may be combined for sign-then-encrypt.

=item B<--gpg-key-id> FINGERPRINT

Signing key fingerprint or ID (required when C<--gpg-sign> is used).

=item B<--gpg-passphrase> PASSPHRASE

Passphrase to unlock the secret key. When omitted, C<gpg-agent> is expected to handle passphrase prompting.

=item B<--gpg-recipients> ADDRESS [ADDRESS ...]

Recipient key IDs or e-mail addresses for encryption. Defaults to C<--to> when not specified.

=item B<--gpg-digest> ALGORITHM

Hash algorithm for signatures. Default: C<SHA256>.

Valid values: C<SHA256>, C<SHA384>, C<SHA512>, C<SHA1>.

=item B<--gpg-bin> PATH

Full path to the C<gpg> executable. Defaults to searching C<gpg2> then C<gpg> in C<PATH>.

=item B<--gpg-keyserver> URL

Keyserver URL for auto-fetching recipient keys. Only consulted when C<--gpg-autofetch> is set. Example: C<keys.openpgp.org>

=item B<--gpg-autofetch>

Fetch missing recipient public keys from C<--gpg-keyserver> before encrypting.

=back

=head2 S/MIME (requires L<Crypt::SMIME>)

S/MIME options cannot be combined with OpenPGP options.

=over 4

=item B<--smime-sign>

Sign the message (RFC 5751 C<multipart/signed> with detached signature).

=item B<--smime-encrypt>

Encrypt the message (RFC 5751 C<application/pkcs7-mime>).

C<--smime-sign> and C<--smime-encrypt> may be combined for sign-then-encrypt.

=item B<--smime-cert> FILE

Signer certificate in PEM format (required when C<--smime-sign> is used).

=item B<--smime-key> FILE

Signer private key in PEM format (required when C<--smime-sign> is used).

=item B<--smime-key-password> PASSPHRASE

Passphrase for an encrypted private key.

=item B<--smime-ca-cert> FILE

CA certificate in PEM format, included for chain verification.

=item B<--smime-recipient-cert> FILE [FILE ...]

Recipient certificate(s) in PEM format (required when C<--smime-encrypt> is used). Repeatable for multi-recipient encryption.