aboutsummaryrefslogtreecommitdiff
path: root/etc/sendmail
diff options
context:
space:
mode:
authorJohn-Mark Gurney <jmg@FreeBSD.org>2013-10-19 18:51:06 +0000
committerJohn-Mark Gurney <jmg@FreeBSD.org>2013-10-19 18:51:06 +0000
commitff14d523bb9e5805273b7f875044429af3d3aaff (patch)
tree9c5fa17e375961b2b89a7f29f6cd354d8d559f12 /etc/sendmail
parent9768475eb08a6ebd8c937c81835c2cc55018fc3f (diff)
Notes
Diffstat (limited to 'etc/sendmail')
-rw-r--r--etc/sendmail/freebsd.mc15
1 files changed, 15 insertions, 0 deletions
diff --git a/etc/sendmail/freebsd.mc b/etc/sendmail/freebsd.mc
index 6d756368daca9..7ab7386fa2b4b 100644
--- a/etc/sendmail/freebsd.mc
+++ b/etc/sendmail/freebsd.mc
@@ -42,6 +42,11 @@ divert(-1)
# /usr/share/sendmail/cf/README or
# /usr/src/contrib/sendmail/cf/README
#
+#
+# NOTE: If you enable RunAsUser, make sure that you adjust the permissions
+# and owner of the SSL certificates and keys in /etc/mail/certs to be usable
+# by that user.
+#
divert(0)
VERSIONID(`$FreeBSD$')
@@ -54,6 +59,16 @@ FEATURE(local_lmtp)
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')
+dnl Enable STARTTLS for receiving email.
+define(`CERT_DIR', `/etc/mail/certs')dnl
+define(`confSERVER_CERT', `CERT_DIR/host.cert')dnl
+define(`confSERVER_KEY', `CERT_DIR/host.key')dnl
+define(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl
+define(`confCLIENT_KEY', `CERT_DIR/host.key')dnl
+define(`confCACERT', `CERT_DIR/cacert.pem')dnl
+define(`confCACERT_PATH', `CERT_DIR')dnl
+define(`confDH_PARAMETERS', `CERT_DIR/dh.param')dnl
+
dnl Uncomment to allow relaying based on your MX records.
dnl NOTE: This can allow sites to use your server as a backup MX without
dnl your permission.