Re: [exim] The No Certificate Warning and the Right Way to S…

Top Page
Delete this message
Reply to this message
Author: Martin McCormick
Date:  
To: exim-users
Subject: Re: [exim] The No Certificate Warning and the Right Way to Stop it
Jeremy Harris via Exim-users <exim-users@???> writes:
> What is the output of "exim4 -bP tls_certificate tls_privatekey" ?


This is a followup to that question. As I previously reported,
neither of those variables are set even though I went through the
motions of making those files. Since exim4 is not a mail server,
itself, we may have some mechanized confusion at work. The cert
message appears because the loopback instance of exim4 runs on
localhost's address of 127.0.0.1 which is fine as it goes but
here's what I notice.

exim -bP tls_advertise_hosts
tls_advertise_hosts = *

This is always true no matter what I do to any of the settings so
far.

    I went as far as going to /etc/exim4/conf.d/main and
modifying the line in /etc/exim4/conf.d/main/03_exim4-config_tlsoptions
from tls_advertise_hosts = MAIN_TLS_ADVERTISE_HOSTS
to tls_advertise_hosts =


followed by a dpkg-reconfigure exim4-config.

    No need to check much because the cert  nag pops up
meaning the new instance of exim4 is up and running.


    Trying split and non-split configuration has the same
results with 
exim -bP tls_advertise_hosts
tls_advertise_hosts = *


which never changes.

    If this was a fully-internet connected host as far as
mail goes, I would be much more worried about the lack of a
certificate but I think that if one runs that type of host, there
may be another module one must install via debian's apt-get and
or aptitude installation methods.


Martin