Bug#310771: Today's exim4 update broke TLS configuration

Sam Morris Sam Morris <sam@robots.org.uk>, 310771@bugs.debian.org
Thu, 26 May 2005 04:20:02 +0100


This is a multi-part message in MIME format.
--------------040409010504090802000904
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Ok, I guess this is almost a dupe of #305443. The changes to 
README.Debian in SVN cover the general topic of macros nicely.

I have attached a patch for README.TLS, though perhaps it would be 
better to remove the remark about log_selector, and instead reinstate 
the option into 03_exim4-config_tlsoptions.

-- 
Sam Morris
http://robots.org.uk/

PGP key id 5EA01078
3412 EA18 1277 354B 991B  C869 B219 7FDB 5EA0 1078

--------------040409010504090802000904
Content-Type: text/plain;
 name="tls.diff"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="tls.diff"

--- -	2005-05-26 04:15:39.913553000 +0100
+++ README.TLS	2005-05-26 04:12:32.854592802 +0100
@@ -29,12 +29,11 @@
 Next edit /etc/exim4/exim4.conf.template (or if you are using
 split-configuration - dc_use_split_config='true' in
 /etc/exim4/update-exim4.conf.conf -
-/etc/exim4/conf.d/main/03_exim4-config_tlsoptions) and activate these
-options by removing the hash-mark ("#") in front of them.
-# log_selector = +tls_cipher +tls_peerdn
-# tls_advertise_hosts = *
-# tls_certificate = CONFDIR/exim.crt
-# tls_privatekey = CONFDIR/exim.key
+/etc/exim4/conf.d/main/03_exim4-config_tlsoptions) and define the
+MAIN_TLS_ENABLE macro to activate the options therein.
+
+You can also set log_selector if you want the properties of TLS connections
+to be logged. A sensible default is: log_selector = +tls_cipher +tls_peerdn
 
 If you don't manage exim's configuration with debconf, you'll have to add
 these options to your handcrafted configuration file

--------------040409010504090802000904--