HOSTS_AVOID_TLS=
-exim_path = EXIM_PATH
-host_lookup_order = bydns
+.include DIR/aux-var/tls_conf_prefix
+
primary_hostname = myhost.test.ex
-rfc1413_query_timeout = 0s
-spool_directory = DIR/spool
-log_file_path = DIR/spool/log/%slog
-gecos_pattern = ""
-gecos_name = CALLER_NAME
# ----- Main settings -----
tls_advertise_hosts = *
tls_certificate = DIR/aux-fixed/cert1
-tls_privatekey = DIR/aux-fixed/cert1
-
# ----- Authenticators -----
driver = smtp
hosts = 127.0.0.1
port = PORT_D
- hosts_avoid_tls = HOSTS_AVOID_TLS
- hosts_require_auth = *
allow_localhost
+ hosts_try_fastopen = :
+ hosts_avoid_tls = HOSTS_AVOID_TLS
+ tls_verify_certificates = DIR/aux-fixed/cert1
+ tls_verify_cert_hostnames = :
+ hosts_require_auth = *
+
+ # These can be made visible by adding "-d-all+deliver+transport+tls" to the script 1st queuerun
+ headers_add = X-tls-cipher: <$tls_cipher>
+ headers_add = X-tls-out-cipher: <$tls_out_cipher>
# End