On Fri, 3 Jan 2003, Josh Stompro wrote:
> and the tls_certificate option is of type "string" not "string*". Are
oh. looking again, you're using 3.10. thats ways too old i'm afraid,
its high time for you to upgrade to 3.36 (or even better) the latest
v4. it's very likely that in 3.10, tls_certificates is of type string,
not string*.
the type "string*" means that the option in question can contain
expandable items, which will be expanded by exim at runtime.
you already know you will have to use 3 ips for the 3 domains.
tls_certificates being expandable allows you to run only one daemon
process and use the ${interface_address} expansion variable to specify
the certificate, depending on which of your ips the message is coming
in, something like:
tls_certificate = /etc/ssl/certs/exim.${interface_address}
and then, you put (or link, which sounds better to me) your certs as:
/etc/ssl/certs/exim.1.2.3.1 <- for domainA
/etc/ssl/certs/exim.1.2.3.2 <- for domainB
/etc/ssl/certs/exim.1.2.3.3 <- for domainC
and of course you have domainA's mx set to 1.2.3.1, domainB's to
1.2.3.2, etc.
this way you don't have to run three instances of exim.
pretty damn powerful, aint it :>
--
[-]
... and the rest is silence.
