From: Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de>
Date: Wed, 12 Feb 2020 22:41:03 +0000 (+0100)
Subject: GnuTLS: Clarify the use of SSLKEYFILE
X-Git-Tag: exim-4_94_RC0~100
X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/7832b9aa09dc312a137a1a56924d270085fad39e

GnuTLS: Clarify the use of SSLKEYFILE
---

diff --git a/src/src/tls-gnu.c b/src/src/tls-gnu.c
index 2e69c5936..826a3fdc5 100644
--- a/src/src/tls-gnu.c
+++ b/src/src/tls-gnu.c
@@ -2307,11 +2307,12 @@ if (TRUE)
   }
 else
   debug_printf("To get keying info for TLS1.3 is hard:\n"
-    " set environment variable SSLKEYLOGFILE to a filename writable by uid exim\n"
-    " add SSLKEYLOGFILE to keep_environment in the exim config\n"
-    " run exim as root\n"
-    " if using sudo, add SSLKEYLOGFILE to env_keep in /etc/sudoers\n"
-    " (works for TLS1.2 also, and saves cut-paste into file)"
+    " Set environment variable SSLKEYLOGFILE to a filename relative to the spool directory,\n"
+    " and make sure it is writable by the Exim runtime user.\n"
+    " Add SSLKEYLOGFILE to keep_environment in the exim config.\n"
+    " Start Exim as root.\n"
+    " If using sudo, add SSLKEYLOGFILE to env_keep in /etc/sudoers\n"
+    " (works for TLS1.2 also, and saves cut-paste into file).\n"
     " Trying to use add_environment for this will not work\n");
 #endif
 }