Re: [exim] Exim4, can't send mail with SSL/TLS after upgrad…

Top Page
Delete this message
Reply to this message
Author: Daniel Tiefnig
Date:  
To: exim-users
Subject: Re: [exim] Exim4, can't send mail with SSL/TLS after upgrade from Sarge to Lenny?
timebandit wrote:
> TLS_ON_CONNECT_PORTS=465 is written in the exim4.conf.template


Hmm, I think this should be "tls_on_connect_ports=465", with lower-case
letters. AFAICS there is no TLS_ON_CONNECT_PORTS macro in the Debian
config template, and tls_on_connect_ports is a main configuration option
for exim4.

Some general notes related to Debian-exim, you most likely already know
all of this:

Always call update-exim4.conf after modifying the template.

Make sure update-exim4.conf uses exim4.conf.template. Look for
dc_use_split_config='false' in /etc/exim4/update-exim4.conf.conf. You'll
have to set your settings in the files below the /etc/exim4/conf.d/
directory otherwise.

Make sure exim uses the generated config file.
The command
$ exim4 -bV
should print something like
"Configuration file is /var/lib/exim4/config.autogenerated"
on the last output line. But if it prints e.g. /etc/exim4/exim4.conf,
exim will use this file instead and you'll have to change that one.

Further:

Check whether exim listens to port 465. "netstat -tpln" is your friend.

Try connecting to localhost port 465 using telnet. It should NOT show
the SMTP banner but wait for the SSL handshake.
Install telnet-ssl using apt and try to connect using "telnet -z ssl",
you should see the SMTP banner this time.

br,
daniel