From 5013c11c5d2038f1eb3e70272cd4cc0e05fd25bc Mon Sep 17 00:00:00 2001
From: Mark Wooding <mdw@distorted.org.uk>
Date: Wed, 4 Jul 2018 18:42:53 +0100
Subject: [PATCH] config.m4: Don't deploy the Lets Encrypt certificate on
 submission.

---
 config.m4 | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/config.m4 b/config.m4
index a9b30b8..981f672 100644
--- a/config.m4
+++ b/config.m4
@@ -83,8 +83,9 @@ DEFCONF(relay_clients, <m4_dnl
 DEFCONF(certlist,
 <:m4_ifelse(t, m4_ifelse(MODE, hub, nil, MODE, srv, nil, t),
 <:CONF_sysconf_dir/server.certlist:>,
-<:CONF_sysconf_dir/${if match_ip{$sender_host_address}{+trusted} \
-	{server}{letsencrypt}}.certlist:>):>)
+<:CONF_sysconf_dir/${if ={$received_port}{CONF_submission_port}{server}\
+			{${if match_ip{$sender_host_address}{+trusted} \
+				      {server}{letsencrypt}}}}.certlist:>):>)
 
 ## TLS-related settings.  We're assuming GNUTLS here, rather than OpenSSL.
 ## For local connections we are very strict.  For random clients, we try
-- 
2.11.0