diff options
Diffstat (limited to 'debian/debconf/conf.d/main/03_exim4-config_tlsoptions')
| -rw-r--r-- | debian/debconf/conf.d/main/03_exim4-config_tlsoptions | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/debian/debconf/conf.d/main/03_exim4-config_tlsoptions b/debian/debconf/conf.d/main/03_exim4-config_tlsoptions new file mode 100644 index 0000000..9c07b50 --- /dev/null +++ b/debian/debconf/conf.d/main/03_exim4-config_tlsoptions @@ -0,0 +1,30 @@ +# Example for TLS/SSL configuration. + +# See /usr/share/doc/exim4-base/README.TLS* for explanations. + +# Defines what hosts to 'advertise' AUTHentication to when they connect +# via TLS. Setting this to * will advertise this functionality to all +# hosts that connect with TLS and this is a good default +# +# hostlist auth_over_tls_hosts = * + +# Defines that you want to log what cipher your exim and the peer's mailer +# uses to encrypt the transaction. It also defines you want to log the 'DN' +# (Distinguished Name) of the certificate of the peer. +# +# log_selector = +tls_cipher +tls_peerdn + +# Defines what hosts to 'advertise' STARTTLS functionality to. Setting this +# to * will advertise to all hosts that connect with EHLO, and this is a +# good default +# +# tls_advertise_hosts = * + +# Defines where your SSL-certificate and SSL-Private Key are located. +# This requires a full path. The files pointed to must be kept 'secret' +# and should be owned my root.mail mode 640 (-rw-r-----). Usually the +# exim-gencert script takes care of these prerequisites. +# +# tls_certificate = CONFDIR/exim.crt +# tls_privatekey = CONFDIR/exim.key + |