Internet Express for Tru64 UNIX Version 6.8 Administration Guide (14233)

TEMP+ or PERM+ shorthands are used to mark an entry as temporary or permanent
failure/rejection.
Access database text line
StartTLS connection as server to system cbsTLS_Clt:cbs.hp.com
StartTLS connection and certificate verification required (failure
marked as permanent)
TLS_Clt:cbs.hp.com PERM+VERIFY
Must encrypt with at least 64 bits (failure marked as temporary
)
TLS_Clt:cbs.hp.com TEMP+ENCR:64
Certificate verification and encryption strength of at least 32 bits
(failure marked as temporary)
TLS_Clt:cbs.hp.com TEMP+VERIFY:32
The other modifiers include the CN, CS and CI tags. This tag class is started with a ‘+’ sign and
additional tags are separated by ‘++’. CN is shorthand for the Common name of the client or
server certification (the fully qualified domain name of the server). CS is shorthand for the
Common server certification (the fully qualified domain name of the server). CI is shorthand for
the Common client certification (the fully qualified domain name of the client).
CN:name means CN must be ‘name’
CN—CN means CN must the name of the server
CS:name means the Domain name must be ‘name’
CI:name means the CI Domain name must be ‘name
Summary of TLS options available for use in the access data file
OptionalAdditional fieldsSecond (or more) fieldFirst field
YES or NOAddress, or host, or
domain information
Try_TLS
• CN:name
• CN—CN
• CS:name
• CI:name
optional
• VERIFY |
• ENCR:bits |
• VERIFY:bits
host-name or addressTLS_Srv: (TLS Server
Side)
• CN:name
• CN—CN
• CS:name
• CI:name
optional
• VERIFY |
• ENCR:bits |
• VERIFY:bits
host-name or addressTLS_Clt: (TLS Client
Side)
• CN:name
• CN—CN
• CS:name
• CI:name
optional
• VERIFY |
• ENCR:bits |
• VERIFY:bits
user@, domain,
subdomain
TLS_Rcpt: (TLS Client
Side)
S, or A or s v a
Upper case options
• S- Do not offer STARTTLS
• V- Do not request STARTTLS
client cert
• A- Do not offer SMTPAUTH
Lower case (s,v or a) means
offer/request TLS:
• s - Offer STARTTLS
• v - Request STARTTLS client cert
• a - Offer SMTPAUTH
Blank, address,
hostname
Srv_Features: (Server
Features)
120 Mail Delivery Administration