Bug#310771: Today's exim4 update broke TLS configuration
Sam Morris
Sam Morris <sam@robots.org.uk>, 310771@bugs.debian.org
Thu, 26 May 2005 04:20:02 +0100
This is a multi-part message in MIME format.
--------------040409010504090802000904
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Ok, I guess this is almost a dupe of #305443. The changes to
README.Debian in SVN cover the general topic of macros nicely.
I have attached a patch for README.TLS, though perhaps it would be
better to remove the remark about log_selector, and instead reinstate
the option into 03_exim4-config_tlsoptions.
--
Sam Morris
http://robots.org.uk/
PGP key id 5EA01078
3412 EA18 1277 354B 991B C869 B219 7FDB 5EA0 1078
--------------040409010504090802000904
Content-Type: text/plain;
name="tls.diff"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="tls.diff"
--- - 2005-05-26 04:15:39.913553000 +0100
+++ README.TLS 2005-05-26 04:12:32.854592802 +0100
@@ -29,12 +29,11 @@
Next edit /etc/exim4/exim4.conf.template (or if you are using
split-configuration - dc_use_split_config='true' in
/etc/exim4/update-exim4.conf.conf -
-/etc/exim4/conf.d/main/03_exim4-config_tlsoptions) and activate these
-options by removing the hash-mark ("#") in front of them.
-# log_selector = +tls_cipher +tls_peerdn
-# tls_advertise_hosts = *
-# tls_certificate = CONFDIR/exim.crt
-# tls_privatekey = CONFDIR/exim.key
+/etc/exim4/conf.d/main/03_exim4-config_tlsoptions) and define the
+MAIN_TLS_ENABLE macro to activate the options therein.
+
+You can also set log_selector if you want the properties of TLS connections
+to be logged. A sensible default is: log_selector = +tls_cipher +tls_peerdn
If you don't manage exim's configuration with debconf, you'll have to add
these options to your handcrafted configuration file
--------------040409010504090802000904--