Mailing List Archive

[Bug 2545] Allow disabling autogenerated selfsigned cert warning
https://bugs.exim.org/show_bug.cgi?id=2545

--- Comment #10 from Andrew Aitchison <exim@aitchison.me.uk> ---
I've had another look at this having upgraded to Ubuntu 20.04 which has exim
4.93-13ubuntu1

Because of the way exim uses new processes for privilege control, I get one of
these warnings for each queue run:

2020-05-16 16:28:50 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 16:28:50 Start queue run: pid=880826
2020-05-16 16:28:50 End queue run: pid=880826

and *two* when I run "mail"

2020-05-16 17:20:51 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 17:20:51 1jZzYR-003iCX-Gp <= werdna@warden U=werdna P=local S=429
2020-05-16 17:20:51 Warning: No server certificate defined; will use a
selfsigned one.
Suggested action: either install a certificate or change tls_advertise_hosts
option
2020-05-16 17:20:51 1jZzYR-003iCX-Gp => werdna <werdna@warden> R=local_user
T=mail_spool
2020-05-16 17:20:51 1jZzYR-003iCX-Gp Completed

I would like opportunistic TLS encryption and I am happy to be reminded
that I haven't enabled it to give any sort of authentication *when I use it*,
but having the message when the connection is a pipe,
or when there is no connection at all, seems terribly wrong.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2545] Allow disabling autogenerated selfsigned cert warning [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2545

--- Comment #11 from Andreas Metzler <eximusers@bebt.de> ---
(In reply to Andrew Aitchison from comment #10)
> I've had another look at this having upgraded to Ubuntu 20.04 which has exim
> 4.93-13ubuntu1
>
> Because of the way exim uses new processes for privilege control, I get one
> of these warnings for each queue run:
[...]
>
> and *two* when I run "mail"
[...]


I think 4.94~RC2 should be less noisy, could you doublecheck?

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2545] Allow disabling autogenerated selfsigned cert warning [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2545

--- Comment #12 from Andrew Aitchison <exim@aitchison.me.uk> ---
>> I think 4.94~RC2 should be less noisy, could you doublecheck?

In private mail Andreas Metzler replied
> RC1 is available as package in Debian/experimental.
> With a straight rebuild it works on Debian/buster, so the same should
> work with at least Ubuntu 19 and 20.

Building 4.94~RC1 from the Debian/experimental source worked, thanks.

I now only see the autogenerated selfsigned cert warning
when I (re)start the daemon, not when I run "mail" or "mailq",
when the SMTP listener accepts a message or on local mail injection
by fetchmail.

This looks good. Thanks.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2545] Allow disabling autogenerated selfsigned cert warning [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2545

Jeremy Harris <jgh146exb@wizmail.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Assignee|jgh146exb@wizmail.org |unallocated@exim.org

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##