# /usr/share/doc/exim4-base/examples/exim-gencert
[*] Creating a self signed SSL certificate for Exim!
This may be sufficient to establish encrypted connections but for
secure identification you need to buy a real certificate!
Please enter the hostname of your MTA at the Common Name (CN) prompt!
Generating a 1024 bit RSA private key
.................++++++
..........++++++
writing new private key to '/etc/exim4/exim.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Code (2 letters) [US]:dk
State or Province Name (full name) []:Jylland
Locality Name (eg, city) []:Silkeborg
Organization Name (eg, company; recommended) []:net-help.dk
Organizational Unit Name (eg, section) []:smtp.net-help.dk
Server name (eg. ssl.domain.tld; required!!!) []:smtp.net-help.dk
Email Address []:This email address is being protected from spambots. You need JavaScript enabled to view it.
[*] Done generating self signed certificates for exim!
Refer to the documentation and example configuration files
over at /usr/share/doc/exim4-base/ for an idea on how to enable TLS
support in your mail transfer agent.
herefter vil man under /etc/exim4/ kunne finde en exim.key og exim.crt
Enable tls ved at editere i /etc/exim4/conf.d/main/03_exim4-config_tlsoptions filen
# vi /etc/exim4/conf.d/main/03_exim4-config_tlsoptions
Sæt nedenstående linje lige over denne linje .ifdef MAIN_TLS_ENABLE
MAIN_TLS_ENABLE=1
opdatere exim configurationen igen.
# update-exim4.conf
# /etc/init.d/exim4 restart
Test at exim4 nu understøtter TLS.
# telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 lenny.it-geek ESMTP Exim 4.69 Tue, 28 Dec 2010 17:21:06 +0100
ehlo d
250-lenny.it-geek Hello localhost.localdomain [127.0.0.1]
250-SIZE 52428800
250-PIPELINING
250-STARTTLS
250 HELP
quit
221 lenny.it-geek closing connection
Connection closed by foreign host.
