[exim] Re: TLS SNI possibly breaking "verify = certificate"

2024-04-28 Thread Slavko via Exim-users
Dňa 29. 4. o 0:52 Jeremy Harris via Exim-users napísal(a):   accept set acl_m_tmp = \${certextract {subj_altname,dns}{\$$acl_arg2}} please, can you explain me why the $ are escaped? If i understand it correctly, the "\$$acl_arg2" part is about sending variable name in acl_arg2, but the esca

[exim] Re: TLS SNI possibly breaking "verify = certificate"

2024-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2024 22:32, Mark Hills via Exim-users wrote: "verify = certificate" no longer passes after some system upgrade. Some? What, precisely? My systems running OpenSMTPD submit mail to an Exim smarthost. Authentication used "verify = certificate", then checks for known certificate finger

[exim] TLS SNI possibly breaking "verify = certificate"

2024-04-28 Thread Mark Hills via Exim-users
"verify = certificate" no longer passes after some system upgrade. My systems running OpenSMTPD submit mail to an Exim smarthost. Authentication used "verify = certificate", then checks for known certificate fingerprint. This has worked for many years. Extracts from configuration at the end of

[exim] Re: SRS example in spec

2024-04-28 Thread Andrew C Aitchison via Exim-users
On Sun, 28 Apr 2024, Andreas Metzler via Exim-users wrote: On 2024-04-28 Jeremy Harris via Exim-users wrote: On 28/04/2024 06:05, Andreas Metzler via Exim-users wrote: The router fails all bounces where inbound_srs{} fails, not only the ones that "look SRS'd". It assumes that you really ar

[exim] Re: SRS example in spec

2024-04-28 Thread Andreas Metzler via Exim-users
On 2024-04-28 Jeremy Harris via Exim-users wrote: > On 28/04/2024 06:05, Andreas Metzler via Exim-users wrote: >> The router fails all bounces where >> inbound_srs{} fails, not only the ones that "look SRS'd". > It assumes that you really are SRS'ing all outbounds, therefore > any bounce not SRS

[exim] Re: SRS example in spec

2024-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2024 06:05, Andreas Metzler via Exim-users wrote: The router fails all bounces where inbound_srs{} fails, not only the ones that "look SRS'd". It assumes that you really are SRS'ing all outbounds, therefore any bounce not SRS (in addition to those with bad SRS) is de-facto not valid.