Re: [Exim] SSL certificates on multihomed hosts

On Mon, 10 Nov 2003, Marek Michalkiewicz wrote:

> I guess it may be possible to run a few separate copies of Exim,
> one for each interface, with its own configuration files to specify
> different certificates - but that looks very complicated to me, as
> the configuration is the same, all I need is different certificates
> depending on local IP of the incoming connection (as in uw-imapd).

This should be no problem. The value of the option is expanded, so you
can write, for example,

tls_certificate = ${if eq{$interface_address}\
                         {192.168.34.56}\
                         {/file/with/one/certificate}\
                         {/file/with/another/certificate}}

Or you could use a lookup, or whatever.

--
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.
Get the Exim 4 book:    http://www.uit.co.uk/exim-book