[exim] server_advertise_condition and TLS

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Matthias-Christian Ott
Date:  
À: exim-users
Sujet: [exim] server_advertise_condition and TLS
Hi,

I use the following configuration with Debian's exim-daemon-heavy:

# cat /etc/exim4/exim4.conf
primary_hostname = ...

tls_advertise_hosts = *

tls_certificate = /etc/ssl/certs/...
tls_privatekey = /etc/ssl/private/...

domainlist local_domains = $primary_hostname

acl_smtp_rcpt = acl_check_rcpt

begin acl

acl_check_rcpt:
  accept hosts = :
  accept authenticated = *
         control = submission
  accept domains = +local_domains
  deny


begin routers

dns_lockup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp

local_users:
driver = accept
domains = +local_domains
transport = local_delivery
check_local_user

begin transports

remote_smtp:
driver = smtp

local_delivery:
driver = pipe
command = /usr/lib/dovecot/deliver
temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78
log_output
delivery_date_add
envelope_to_add
return_path_add

begin authenticators

plain:
driver = dovecot
public_name = PLAIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
server_advertise_condition = ${if eq{$tls_cipher}{}{no}{yes}}

# exim -bV
Exim version 4.71 #1 built 01-Jan-2010 13:39:44
Copyright (c) University of Cambridge, 1995 - 2007
Berkeley DB: Berkeley DB 4.8.26: (December 18, 2009)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS
move_frozen_messages Content_Scanning DKIM Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb
dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram
redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
GnuTLS compile-time version: 2.8.5
GnuTLS runtime version: 2.8.5
Configuration file is /etc/exim4/exim4.conf

For some reason server_advertise_condition always evaluates to no.

Does anyone have an idea why?

Regards,
Matthias-Christian