Differences

This shows you the differences between two versions of the page.

--- exim4:tls [2016/11/30 12:17] – peter
+++ exim4:tls [2020/07/15 09:30] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Exim4 - TLS ======
-Generate your keys.
-first switch to cd /etc
 ===== Generate a 1024-bit RSA key =====
@@ Line 15: / Line 11: @@
 <code bash>
-openssl dhparam -out exim.dhparam  1024
+openssl dhparam -out exim.dhparam 1024
 </code>
@@ Line 47: / Line 43: @@
 </file>
-#************************
+<WRAP info>
+If tls_dhparam is set, the SSL library is initialized for the use of Diffie-Hellman ciphers with the parameters contained in the file.  Set this to none to disable use of DH entirely, by making no prime available:
+</WRAP>
+<WRAP info>
+The ciphers could be set as something like:
+<code>
+tls_require_ciphers = ${if =={$received_port}{25}\
+                           {DEFAULT}\
+                           {HIGH:!MD5:!SHA1}}
+</code>
+# Use this command to check the ciphers that openssl supports:
+<code bash>
+openssl ciphers 'HIGH:!MD5:!SHA1'
+</code>
+</WRAP>
+===== Logging =====
 During run-time mainlog entries showing TLS:
@@ Line 75: / Line 90: @@
   #
-  # report TLS status
+  # Report TLS status.
   #
   warn    condition = ${if def:tls_in_cipher {1}{0}}