[Pkg-exim4-users] Exim4 TLS and relaying

[Andreas Metzler]

Yan Seiner <yan at seiner.com> wrote:
> I am trying to set up up exim4.  I have been running exim4 successfully 
> on a very, very old server and rather than trying to migrate my obsolete 
> configuration I am trying to set it up from scratch.

> At the top of /etc/exim4/exim4.conf.template I have:

> MAIN_TLS_ENABLE = true
> MAIN_TLS_CERTIFICATE = /etc/ssl/certs/mail_seiner_com.pem

You seem to be missing a corresponding setting for the correct key for
certificate.

> In /etc/exim4/conf.d/auth/30_exim4-config_examples I have:

> plain_server:
>   driver = plaintext
>   public_name = PLAIN
>   server_condition           = ${if pam{$auth2:${sg{$auth3}{:}{::}} 
> }{true}{false}}
>   server_advertise_condition = ${if eq{$tls_cipher}{}{false}{true}}
>   server_set_id = $auth2
>   server_prompts = :
[...]

Do not try to use PAM for authentication. See the respective entry in
/usr/share/doc/exim4-base/README.Debian.html

> And yet when I test this from an outside source I do not get any TLS 
> advertisement.  Nothing in the exim log files at all:

> Connecting to 66.178.130.209

> 220 NewMoon.seiner.lan ESMTP Exim 4.76 Sun, 27 Oct 2013 07:57:13 -0700 
[...]

Exim 4.76? I thought you were setting up a new exim installation with
current Debian packages.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'