Bug#440663: exim4-config: MAIN_TLS_* doesn't actually enable TLS

[John Goerzen]

Package: exim4-config
Version: 4.67-8
Severity: normal

I found that, in able to actually enable TLS, I had to add these lines 
to the remote_smtp_smarthost transport:

  tls_certificate = MAIN_TLS_CERTKEY
  tls_verify_certificates  = MAIN_TLS_VERIFY_CERTIFICATES

I had created an main/02_custom_tls file with MAIN_TLS_ENABLE = 1 and 
correct definitions for MAIN_TLS_CERTKEY and 
MAIN_TLS_VERIFY_CERTIFICATES.  But this was not actually used for 
sending mail to the smarthost until I added the above lines to the 
config.

-- Package-specific info:
Exim version 4.67 #1 built 19-Aug-2007 14:09:06
Copyright (c) University of Cambridge 2006
Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September  6, 2005)
Support for: crypteq iconv() IPv6 GnuTLS move_frozen_messages
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch nis nis0 passwd
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /var/lib/exim4/config.autogenerated

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-3-k7 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages exim4-config depends on:
ii  adduser                       3.104      add and remove users and groups
ii  debconf [debconf-2.0]         1.5.14     Debian configuration management sy

exim4-config recommends no packages.

-- debconf information:
* exim4/dc_smarthost: glockenspiel.complete.org
  exim4/dc_relay_domains: complete.org
  exim4/dc_localdelivery: mbox format in /var/mail/
  exim4/exim3_upgrade: true
* exim4/dc_eximconfig_configtype: mail sent by smarthost; no local mail
* exim4/dc_readhost: complete.org
  exim4/exim4-config-title:
  exim4/dc_noalias_regenerate: false
* exim4/dc_relay_nets: 10.200.0.0/24 : 10.200.1.3/32
* exim4/mailname: complete.org
* exim4/dc_local_interfaces: 127.0.0.1 : 10.200.0.2
* exim4/dc_minimaldns: false
* exim4/dc_other_hostnames: erwin.lan.complete.org
  exim4/no_config: true
* exim4/hide_mailname: true
* exim4/dc_postmaster: jgoerzen at complete.org
* exim4/use_split_config: true