[exim] $tls_in_sni is blank

I’ve installed 4.92.2 on CentOS 7.


openssl s_client -tls1 -starttls smtp -connect thedoorfellowship.org:587 -servername thedoorfellowship.org <http://thedoorfellowship.org/>

Returns No client certificate CA names sent.


/var/log/exim/main.log shows:

TLS error on connection from (openssl.client.net) [76.14.5.213]:57315 I=[107.180.239.134]:587 (SSL_CTX_use_certificate_chain_file file=/etc/letsencrypt/live//fullchain.pem): error:0200100D:system library:fopen:Permission denied

where /live//… is /live/$tls_in_sni/fullchain.pem


I know this needs to be sanitized, but I’m just testing right now and can’t figure out why it’s blank.