Re: [exim] Multiple SSL certificates with one process or multiple processes?

2005-06-08 Thread Tony Finch
On Wed, 8 Jun 2005, Sven Hartge wrote:

 Is it possible to use multiple SSL certificates with just one
 exim4 daemon process? (On different IPs, of course.)

Yes, it is. Exim doesn't load the certificate until SSL is started, and it
uses string expansion to determine where the cert lives. So you can choose
the certificate using almost any reasoning you want. e.g.

tls_certificate = /etc/exim/cert/$interface_address

Tony.
-- 
[EMAIL PROTECTED]   [EMAIL PROTECTED]   http://dotat.at/   ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/


Re: [exim] Multiple SSL certificates with one process or multiple processes?

2005-06-08 Thread Sven Hartge
Tony Finch wrote:
 On Wed, 8 Jun 2005, Sven Hartge wrote:

 Is it possible to use multiple SSL certificates with just one
 exim4 daemon process? (On different IPs, of course.)

 Yes, it is. Exim doesn't load the certificate until SSL is started, and it
 uses string expansion to determine where the cert lives. So you can choose
 the certificate using almost any reasoning you want. e.g.
 
 tls_certificate   = /etc/exim/cert/$interface_address

Very nice!

Is it also possible to set the greeting banner depending on the
$interface_address of a connection?

Grüße,
Sven.

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/


Re: [exim] Multiple SSL certificates with one process or multiple processes?

2005-06-08 Thread Tony Finch
On Wed, 8 Jun 2005, Sven Hartge wrote:

 Is it also possible to set the greeting banner depending on the
 $interface_address of a connection?

Yes, see the smtp_banner option.

If you want a more thoroughly worked out (i.e. long) example of changing
behaviour based on $interface_address, have a look at my paper:

http://www.cus.cam.ac.uk/~fanf2/hermes/doc/talks/2005-02-eximconf/

Tony.
-- 
[EMAIL PROTECTED]   [EMAIL PROTECTED]   http://dotat.at/   ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/