Package: exim4-config Version: 4.67-8 Severity: normal I found that, in able to actually enable TLS, I had to add these lines to the remote_smtp_smarthost transport:
tls_certificate = MAIN_TLS_CERTKEY tls_verify_certificates = MAIN_TLS_VERIFY_CERTIFICATES I had created an main/02_custom_tls file with MAIN_TLS_ENABLE = 1 and correct definitions for MAIN_TLS_CERTKEY and MAIN_TLS_VERIFY_CERTIFICATES. But this was not actually used for sending mail to the smarthost until I added the above lines to the config. -- Package-specific info: Exim version 4.67 #1 built 19-Aug-2007 14:09:06 Copyright (c) University of Cambridge 2006 Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September 6, 2005) Support for: crypteq iconv() IPv6 GnuTLS move_frozen_messages Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch nis nis0 passwd Authenticators: cram_md5 plaintext Routers: accept dnslookup ipliteral manualroute queryprogram redirect Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp Fixed never_users: 0 Size of off_t: 8 Configuration file is /var/lib/exim4/config.autogenerated -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.18-3-k7 (SMP w/1 CPU core) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages exim4-config depends on: ii adduser 3.104 add and remove users and groups ii debconf [debconf-2.0] 1.5.14 Debian configuration management sy exim4-config recommends no packages. -- debconf information: * exim4/dc_smarthost: glockenspiel.complete.org exim4/dc_relay_domains: complete.org exim4/dc_localdelivery: mbox format in /var/mail/ exim4/exim3_upgrade: true * exim4/dc_eximconfig_configtype: mail sent by smarthost; no local mail * exim4/dc_readhost: complete.org exim4/exim4-config-title: exim4/dc_noalias_regenerate: false * exim4/dc_relay_nets: 10.200.0.0/24 : 10.200.1.3/32 * exim4/mailname: complete.org * exim4/dc_local_interfaces: 127.0.0.1 : 10.200.0.2 * exim4/dc_minimaldns: false * exim4/dc_other_hostnames: erwin.lan.complete.org exim4/no_config: true * exim4/hide_mailname: true * exim4/dc_postmaster: [EMAIL PROTECTED] * exim4/use_split_config: true -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
