[exim-cvs] GnuTLS: Clarify the use of SSLKEYFILE

Top Page
Delete this message
Reply to this message
Author: Exim Git Commits Mailing List
Date:  
To: exim-cvs
Subject: [exim-cvs] GnuTLS: Clarify the use of SSLKEYFILE
Gitweb: https://git.exim.org/exim.git/commitdiff/7832b9aa09dc312a137a1a56924d270085fad39e
Commit:     7832b9aa09dc312a137a1a56924d270085fad39e
Parent:     04403ab0b5778126d98d5c9dc8064405688129e0
Author:     Heiko Schlittermann (HS12-RIPE) <hs@???>
AuthorDate: Wed Feb 12 23:41:03 2020 +0100
Committer:  Heiko Schlittermann (HS12-RIPE) <hs@???>
CommitDate: Wed Feb 19 12:02:38 2020 +0100


    GnuTLS: Clarify the use of SSLKEYFILE
---
 src/src/tls-gnu.c | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)


diff --git a/src/src/tls-gnu.c b/src/src/tls-gnu.c
index 2e69c59..826a3fd 100644
--- a/src/src/tls-gnu.c
+++ b/src/src/tls-gnu.c
@@ -2307,11 +2307,12 @@ if (TRUE)
   }
 else
   debug_printf("To get keying info for TLS1.3 is hard:\n"
-    " set environment variable SSLKEYLOGFILE to a filename writable by uid exim\n"
-    " add SSLKEYLOGFILE to keep_environment in the exim config\n"
-    " run exim as root\n"
-    " if using sudo, add SSLKEYLOGFILE to env_keep in /etc/sudoers\n"
-    " (works for TLS1.2 also, and saves cut-paste into file)"
+    " Set environment variable SSLKEYLOGFILE to a filename relative to the spool directory,\n"
+    " and make sure it is writable by the Exim runtime user.\n"
+    " Add SSLKEYLOGFILE to keep_environment in the exim config.\n"
+    " Start Exim as root.\n"
+    " If using sudo, add SSLKEYLOGFILE to env_keep in /etc/sudoers\n"
+    " (works for TLS1.2 also, and saves cut-paste into file).\n"
     " Trying to use add_environment for this will not work\n");
 #endif
 }