On 2008-06-15 at 10:49 +0100, Martin A. Brooks wrote:
> It does leave me with another question though.  I have one machine that 
> uses a self-generated certificate and in the log file of remote servers, 
> I see entries like this when it sends email:
> 
> 2008-06-15 10:41:16 1K7ojY-0000Ac-B1 => [EMAIL PROTECTED] 
> R=hubbed_hosts_postgres T=remote_smtp H=fish.clues.ltd.uk [80.68.93.86] 
> X=TLS1.0:RSA_AES_256_CBC_SHA1:32 DN="C=GB,ST=London,L=London,O=Clues 
> Ltd,CN=fish.clues.ltd.uk,[EMAIL PROTECTED]"
> 
> Note the certificate information in the DN="" part of the log file.  
> When I send email via the host that is using a "real" certificate, that 
> value is blank  In the logging options +tls_peerdn is set in both 
> machines. Is there another option somewhere I've missed for this?

I suspect that, ironically enough, on the host with the certificate
issued by a well-established CA, you have hosts_avoid_tls set on the
relevant SMTP Transport.

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to