From: Stephen Gran <steve@lobefin.net>
Date: Sun, 5 Apr 2009 12:34:59 +0000 (+0100)
Subject: Make client verify server cert as well
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=d3d73502392b2fe8063aa317713d3c1cc071ee1e;p=mirror%2Fdsa-puppet.git

Make client verify server cert as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
---

diff --git a/modules/exim/files/common/exim4.conf b/modules/exim/files/common/exim4.conf
index f9e3ad56a..b953e51fb 100644
--- a/modules/exim/files/common/exim4.conf
+++ b/modules/exim/files/common/exim4.conf
@@ -1132,6 +1132,8 @@ remote_smtp:
   tls_tempfail_tryclear = true
   tls_certificate = /etc/exim4/ssl/thishost.crt
   tls_privatekey = /etc/exim4/ssl/thishost.key
+  tls_verify_certificates = /etc/exim4/ssl/ca.crt
+  tls_crl = /etc/exim4/ssl/ca.crl
 .endif
 
 # Send the message to procmail