Correct path for ca cert, and add crl checking (this may not work, but

let's see)
Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/exim/files/common/exim4.conf b/modules/exim/files/common/exim4.conf
index c9e1e02..6c4fecb 100644 (file)
--- a/modules/exim/files/common/exim4.conf
+++ b/modules/exim/files/common/exim4.conf
@@ -128,7 +128,8 @@ tls_certificate = /etc/exim4/ssl/thishost.crt
 tls_privatekey = /etc/exim4/ssl/thishost.key
 .ifdef RELAY_HOST
 tls_try_verify_hosts = *
-tls_verify_certificates = /etc/exim4/ssl/client_certs.pem
+tls_verify_certificates = /etc/exim4/ssl/ca.crt
+tls_crl = /etc/exim4/ssl/ca.crl
 .endif
 
 #system_filter = /etc/exim4/filter