Ha!  Good thought, and, due to some prior debugging, I had it set to
777.  Fixed that (640 and directory 640), but, unfortunately, made no
difference.

Thanks, and Regards, 
________________________ 
Allen Williams 
[email protected] 
Office: +1.321.309.7929
Mobile: (321)258-1272 
FAX: (321)727-9607 


-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Dave Evans
Sent: Monday, September 20, 2010 8:15 AM
To: [email protected]
Subject: Re: [exim] Not advertising STARTTLS

On Sun, Sep 19, 2010 at 06:34:06PM -0400, Allen Williams wrote:
> I cannot get exim4 to advertise STARTTLS.  Here is the germane section

> from my autoconfigure.exim.conf file that is configured via a Debian 
> configuration.  As near as I can tell, the only germane lines are the 
> first three.  I can post the exim4.conf.template if necessary:
>
------------------------------------------------------------------------
----------------
> tls_certificate = "/etc/exim4/tls/exim.crt"
> tls_privatekey = "/etc/exim4/tls/exim.key"
> tls_advertise_hosts = *

Just a hunch:
I don't know offhand what checks Exim makes, but I wouldn't be surprised
if
one of the checks is permissions on the crt and key files, and on the
directory containing them.  Permissions like this are probably a good
idea:

-rw-r-----  1 root        Debian-exim  2704 2009-12-29 17:29 server.crt
-rw-r-----  1 root        Debian-exim   887 2009-11-26 20:37 server.key

i.e. not world-readable, not world-writeable (and also there's no reason
for
exim to be able to write them either).

Hope my wild stab in the dark helps,

-- 
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to