Make client verify server cert as well

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/exim/files/common/exim4.conf b/modules/exim/files/common/exim4.conf
index f9e3ad5..b953e51 100644 (file)
--- a/modules/exim/files/common/exim4.conf
+++ b/modules/exim/files/common/exim4.conf
@@ -1132,6 +1132,8 @@ remote_smtp:
   tls_tempfail_tryclear = true
   tls_certificate = /etc/exim4/ssl/thishost.crt
   tls_privatekey = /etc/exim4/ssl/thishost.key
+  tls_verify_certificates = /etc/exim4/ssl/ca.crt
+  tls_crl = /etc/exim4/ssl/ca.crl
 .endif
 
 # Send the message to procmail