On Fri, Jun 10, 2022 at 03:19:30PM -0600, Elliot Finley via Exim-users wrote: > I've been trying to get exim4 up and running on Ubuntu 20.04. [...] > But the problem is, it doesn't appear that CONFDIR is being honored. Later > in the config file there is: > > .ifndef MAIN_TLS_CERTIFICATE > MAIN_TLS_CERTIFICATE = CONFDIR/exim.crt > .endif > tls_certificate = MAIN_TLS_CERTIFICATE > > .ifndef MAIN_TLS_PRIVATEKEY > MAIN_TLS_PRIVATEKEY = CONFDIR/exim.key > .endif > tls_privatekey = MAIN_TLS_PRIVATEKEY > .endif > > But those are NOT being defined. > > # exim -bP | grep tls > tls_advertise_hosts = * > tls_certificate =
Those definitions are skipped because this part of config is inside ".ifdef MAIN_TLS_ENABLE [...] .endif" block, and variable MAIN_TLS_ENABLE is NOT enabled by default. In supplemented docs /usr/share/doc/exim4-base/README.Debian.gz there is par. 2.2.2, "TLS support for Exim as server": One can also get a certificate from a CA and install the key in /etc/exim4/exim.key and the certificate in /etc/exim4/exim.crt. To enable use of the installed certificates set the macro MAIN_TLS_ENABLE in a local configuration file as described in Section 2.1.3, "Using Exim Macros to control the configuration". -- Eugene Berdnikov -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
