base.m4, exchange.m4, config.m4: Tweak TLS settings.
[exim-config] / base.m4
diff --git a/base.m4 b/base.m4
index 9d08088..3b3d82f 100644 (file)
--- a/base.m4
+++ b/base.m4
@@ -250,10 +250,10 @@ smtp_local:
        tls_privatekey = CONF_sysconf_dir/client.key
        tls_verify_certificates = CONF_ca_dir/ca.cert
        tls_require_ciphers = CONF_good_ciphers
-       tls_dh_min_bits = 3070
+       tls_dh_min_bits = 2046
        tls_tempfail_tryclear = false
        authenticated_sender = ${if def:authenticated_id \
-                                   ${authenticated_id@CONF_master_domain} \
+                                   {$authenticated_id@CONF_master_domain} \
                                    fail}
 
 ## A standard transport for local delivery.