TLSSrvOptions

Tune the server TLS settings V8.12 and later

The behavior of STARTTLS authentication and stream encryption (STARTTLS on page 202) can be tuned with this TLSSrvOptions option. It is used like this:

O TLSSrvOptions=letters                       ← configuration file (V8.12 and
later)
-OTLSSrvOptions=letters                       ← command line (V8.12 and later)
define(`confTLS_SRV_OPTIONS', `letters')      ← mc configuration (V8.12 and later)

Here, letters is a list of one or more key letters, each separated from the next by a comma. The default is to omit this option. As of V8.12, only one key letter is available. It is shown in Table 24-26.

Table 24-26. TLSSrvOptions key letters

Letter

Meaning

V

Turn off the request for a client certificate (V8.12 and later).

The TLSSrvOptions option is not safe. If it is specified from the command line, it can cause sendmail to relinquish its special privileges.

Get sendmail, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial