foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sendmail: Use cert and cert chain file seperately

Browse source 
For some reason sendmail didn't like fullchain file so seperate them.
This commit is contained in:
Timo Makinen 2021-03-11 17:28:21 +00:00
parent 4804a50b37
commit 5b03f74903
2 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/sendmail/templates/sendmail.mc.j2
View file

@ -23,7 +23,8 @@ TRUST_AUTH_MECH(`GSSAPI LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI LOGIN PLAIN')dnl
dnl #
define(`confCACERT_PATH', `/etc/mail/certs')dnl
define(`confSERVER_CERT', `/etc/pki/tls/certs/{{ mail_server }}-fullchain.crt')dnl
define(`confCACERT', `/etc/pki/tls/certs/{{ mail_server }}-chain.crt')dnl
define(`confSERVER_CERT', `/etc/pki/tls/certs/{{ mail_server }}.crt')dnl
define(`confSERVER_KEY', `/etc/pki/tls/private/{{ mail_server }}.key')dnl
define(`confCLIENT_CERT', `/etc/pki/tls/certs/{{ mail_server }}.crt')dnl
define(`confCLIENT_KEY', `/etc/pki/tls/private/{{ mail_server }}.key')dnl