[exim] The No Certificate Warning and the Right Way to Stop …

Top Page
Delete this message
Reply to this message
Author: Martin McCormick
Date:  
To: Exim-users
Subject: [exim] The No Certificate Warning and the Right Way to Stop it
After reconfiguring exim4 to correct for an unannounced change
courtesy of my ISP, I got outbound mail humming along once again
but also revived an old issue which several people may recognize:

2022-05-14 00:22:37 Warning: No server certificate defined; will use a selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts option

    This is a valuable warning but attempts to make exim
happy have not stopped the warnings which are the majority of
mainlog lines.


    Except for exim4's contact with 1 smarthost, the rest of
the traffic through it is local traffic so any certificate should
turn off the bombardment.


    I created
-rw-r----- 1 root Debian-exim 1245 May  8 21:43 /etc/exim4/exim.crt
with no change in behavior.


I then tried the second part of the suggestion which reads:
Suggested action: either install a certificate or change tls_advertise_hosts option

    I did.  What I actually did was to edit
/etc/exim4/exim4.conf.template:tls_advertise_hosts = MAIN_TLS_ADVERTISE_HOSTS
so that it reads
tls_advertise_hosts =


Then I did dpkg-reconfigure exim4-config

    That cert warning was the very first line of output meaning
nothing changed.
    What is the least complex way to make these cert warnings
stop?


Martin McCormick