ref: fc1c6f487806d788994ee51cd428b5495f776d8f
parent: aeba31a2a94635da86f0aca0b8c9ed9a464482ab
author: jrmu <jrmu@cloud9p.org>
date: Wed Sep 25 18:56:59 EDT 2024
Add StartTLS
--- a/smtpd.ms
+++ b/smtpd.ms
@@ -8,8 +8,21 @@
#smtp serv net incalldir user
user=`{cat /dev/user}-exec upas/smtpd -s -e -n $3
+exec upas/smtpd -e -f -r -s -n $3
.P2
+
+If you have a certificate you have generated using acmed, you can enable StartTLS
+with -c:
+
+.P1
+exec upas/smtpd -c /sys/lib/tls/acmed/jrmu9.inter9.org.crt -e -f -r -s -n $3
+.P2
+
+.LP
+Note: the -c argument currently has a bug where it does not send the full chain of
+the TLS certificate, so email clients that connect to it may report a certificate
+validation error.
+
.LP
Make sure to edit /mail/lib/smtpd.conf:
.P1