From: Stephen Gran <steve@lobefin.net>
Date: Thu, 21 May 2009 22:02:27 +0000 (+0100)
Subject: Make clients only use tls with smarthost
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=04dc26990eadfcfe352f9bf50868e3a573c9f479;p=mirror%2Fdsa-puppet.git

Make clients only use tls with smarthost
Signed-off-by: Stephen Gran <steve@lobefin.net>
---

diff --git a/modules/exim/templates/eximconf.erb b/modules/exim/templates/eximconf.erb
index e0ac658bf..8038d0e6b 100644
--- a/modules/exim/templates/eximconf.erb
+++ b/modules/exim/templates/eximconf.erb
@@ -1303,6 +1303,7 @@ remote_smtp_smarthost:
   out += nodeinfo['smarthost_port'].to_s + "\n"
   if has_variable?("exim_ssl_certs") && exim_ssl_certs == "true"
     out += '  tls_tempfail_tryclear = false
+  hosts_require_tls = ' + nodeinfo['smarthost'] + '
   tls_certificate = /etc/exim4/ssl/thishost.crt
   tls_privatekey = /etc/exim4/ssl/thishost.key
 '