Re: [exim] Not advertising STARTTLS

Top Page
Delete this message
Reply to this message
Author: Williams, Allen
Date:  
To: Dave Evans, exim-users
Subject: Re: [exim] Not advertising STARTTLS
Ha! Good thought, and, due to some prior debugging, I had it set to
777. Fixed that (640 and directory 640), but, unfortunately, made no
difference.

Thanks, and Regards,
________________________
Allen Williams
allen.williams@???
Office: +1.321.309.7929
Mobile: (321)258-1272
FAX: (321)727-9607


-----Original Message-----
From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org]
On Behalf Of Dave Evans
Sent: Monday, September 20, 2010 8:15 AM
To: exim-users@???
Subject: Re: [exim] Not advertising STARTTLS

On Sun, Sep 19, 2010 at 06:34:06PM -0400, Allen Williams wrote:
> I cannot get exim4 to advertise STARTTLS. Here is the germane section


> from my autoconfigure.exim.conf file that is configured via a Debian
> configuration. As near as I can tell, the only germane lines are the
> first three. I can post the exim4.conf.template if necessary:
>

------------------------------------------------------------------------
----------------
> tls_certificate = "/etc/exim4/tls/exim.crt"
> tls_privatekey = "/etc/exim4/tls/exim.key"
> tls_advertise_hosts = *


Just a hunch:
I don't know offhand what checks Exim makes, but I wouldn't be surprised
if
one of the checks is permissions on the crt and key files, and on the
directory containing them. Permissions like this are probably a good
idea:

-rw-r-----  1 root        Debian-exim  2704 2009-12-29 17:29 server.crt
-rw-r-----  1 root        Debian-exim   887 2009-11-26 20:37 server.key


i.e. not world-readable, not world-writeable (and also there's no reason
for
exim to be able to write them either).

Hope my wild stab in the dark helps,

--
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey