On Mon, Jun 06, 2005 at 04:27:39PM -0400, Joel Dinel wrote:
> On 6/6/05, Timothy Horie <[EMAIL PROTECTED]> wrote:
> > I need to recompile it without TLS. I've tried a lot of ways to get rid
> > of it without a recompile, but all paths led nowhere. I don't want TLS,
> > I don't want to Start TLS, I don't want any error messages in the logs
> > regarding TLS, I don't want to have to disable or enable TLS, I don't
> > want anything to do with TLS.
> > 
> > I've spent the last two months trying to figure out how to get rid of
> > TLS, and recompiling sendmail without TLS is the last thing I can think of.
> > 
> > I am assuming sendmail is compiled with STARTTLS in 3.7 as well, so I'd
> > have to recompile there anyways.
> > 
> > Any ideas?
> 
> Remove STARTTLS support from your .m4 file, and regenerate a .cf file?
> My stock OpenBSD installs work fine without TLS support if I don't use
> it, and I don't have any
> error messages whatsover.
> 
> /usr/share/sendmail/cf/openbsd-proto.mc

STARTTLS will be try when delivering outside mail in stock OpenBSD
configuration. Not having certificates, just disable STARTTLS from
being offered on incomming connections.

Most probably, adding ", Modifier=S" to the CLIENT_OPTIONS lines
in openbsd-proto.mc will disable STARTTLS on outgoing connection.

I beleive also "Try_TLS:        NO" in access.db will do the same.


-- 
Hugo Villeneuve <[EMAIL PROTECTED]>
http://EINTR.net/ 

Reply via email to