[pkgsrc/trunk]: pkgsrc/mail/qmail/files Reorder and clarify TLS setup instruc...

[schmonz <schmonz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/59974ed27b98
branches:  trunk
changeset: 441371:59974ed27b98
user:      schmonz <schmonz%pkgsrc.org@localhost>
date:      Mon Nov 02 10:43:55 2020 +0000

description:
Reorder and clarify TLS setup instructions.

diffstat:

 mail/qmail/files/README.tls |  22 ++++++++++++++--------
 1 files changed, 14 insertions(+), 8 deletions(-)

diffs (38 lines):

diff -r c49225205b2e -r 59974ed27b98 mail/qmail/files/README.tls
--- a/mail/qmail/files/README.tls       Mon Nov 02 10:42:02 2020 +0000
+++ b/mail/qmail/files/README.tls       Mon Nov 02 10:43:55 2020 +0000
@@ -7,20 +7,26 @@
 <URL:https://schmonz.com/qmail/tlsonlyremote/>
 
 
-For qmail to opportunistically encrypt outgoing mail, obtain a
-certificate (e.g., from Let's Encrypt) and make it available as
-@SERVERCERT@.
+For qmail to opportunistically encrypt incoming mail, and to require
+encryption before authentication for submitted messages, first obtain a
+certificate (e.g., from Let's Encrypt), make it available as
+@SERVERCERT@, and apply these permissions:
 
 # chmod 640 @SERVERCERT@
 # chown @QMAIL_DAEMON_USER@:@QMAIL_QMAIL_GROUP@ @SERVERCERT@
-# ln -s @SERVERCERT@ @CLIENTCERT@
+
+Generate DH params:
+
 # update_tmprsadh
 
-Once you have a certificate, regularly regenerate DH params from cron(8):
+Have cron(8) regularly regenerate them:
 
     01 01 * * * @PREFIX@/bin/update_tmprsadh > /dev/null 2>&1
 
+Then install the qmail-run package and use its qmailsmtpd and
+qmailofmipd rc.d scripts.
 
-For qmail to opportunistically encrypt incoming mail, and to require
-encryption before authentication for submitted messages, install the
-qmail-run package and use its qmailsmtpd and qmailofmipd rc.d scripts.
+For qmail to opportunistically encrypt outgoing mail, use the same
+certificate:
+
+# ln -s @SERVERCERT@ @CLIENTCERT@