X-Git-Url: https://git.distorted.org.uk/~mdw/exim-config/blobdiff_plain/1dda4df9f8a4a6ff0d36ea1a7ee4648cb212e057..5a72d0f31f02b3bac0725604a178e50713a1cbaf:/config.m4

diff --git a/config.m4 b/config.m4
index db6b966..981f672 100644
--- a/config.m4
+++ b/config.m4
@@ -80,7 +80,12 @@ DEFCONF(relay_clients, <m4_dnl
 )
 
 ## TLS certificate list.
-DEFCONF(certlist, CONF_sysconf_dir/server.certlist)
+DEFCONF(certlist,
+<:m4_ifelse(t, m4_ifelse(MODE, hub, nil, MODE, srv, nil, t),
+<:CONF_sysconf_dir/server.certlist:>,
+<:CONF_sysconf_dir/${if ={$received_port}{CONF_submission_port}{server}\
+			{${if match_ip{$sender_host_address}{+trusted} \
+				      {server}{letsencrypt}}}}.certlist:>):>)
 
 ## TLS-related settings.  We're assuming GNUTLS here, rather than OpenSSL.
 ## For local connections we are very strict.  For random clients, we try