[exim-dev] [Bug 2545] Allow disabling autogenerated selfsign…

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 2545] Allow disabling autogenerated selfsigned cert warning
https://bugs.exim.org/show_bug.cgi?id=2545

--- Comment #10 from Andrew Aitchison <exim@???> ---
I've had another look at this having upgraded to Ubuntu 20.04 which has exim
4.93-13ubuntu1

Because of the way exim uses new processes for privilege control, I get one of
these warnings for each queue run:

2020-05-16 16:28:50 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 16:28:50 Start queue run: pid=880826
2020-05-16 16:28:50 End queue run: pid=880826

and *two* when I run "mail"

2020-05-16 17:20:51 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 17:20:51 1jZzYR-003iCX-Gp <= werdna@warden U=werdna P=local S=429
2020-05-16 17:20:51 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 17:20:51 1jZzYR-003iCX-Gp => werdna <werdna@warden> R=local_user
T=mail_spool
2020-05-16 17:20:51 1jZzYR-003iCX-Gp Completed

I would like opportunistic TLS encryption and I am happy to be reminded
that I haven't enabled it to give any sort of authentication *when I use it*,
but having the message when the connection is a pipe,
or when there is no connection at all, seems terribly wrong.

--
You are receiving this mail because:
You are on the CC list for the bug.