Configured SSL

Makefile

@@ -48,6 +48,7 @@ all: sendmail-config mail-aliases sendmail-default sm-client-service sendmail-se
 	cd sendmail-8.16.1 && install -v -m644 vacation/vacation.1   /usr/share/man/man1
 	install -v -d -m755 /usr/share/doc/sendmail-8.16.1
 	cd sendmail-8.16.1/doc/op && install -v -m644 op.ps /usr/share/doc/sendmail-8.16.1
+	openssl req -new -x509 -nodes -out /etc/ssl/private/server.pem -keyout /etc/ssl/private/server.pem -days 3650 -subj "/C=US/ST=Denial/L=Springfield/O=Dis/CN=localhost"
 	echo $$(hostname) > /etc/mail/local-host-names
 	@echo "$$MAIL_ALIASES" > /etc/mail/aliases
 	newaliases

sendmail.mc

@@ -4,6 +4,13 @@ VERSIONID(`Cyrus IMAP, SASL and STARTTLS for Certo appliance')
 OSTYPE(linux)dnl
 DOMAIN(generic)dnl
 
+define(`confDONT_PROBE_INTERFACES', `True')dnl
+
+dnl ----------------------------------------------------------------------------
+dnl Privacy.
+dnl ----------------------------------------------------------------------------
+define(`confPRIVACY_FLAGS', `goaway')dnl
+
 dnl ----------------------------------------------------------------------------
 dnl Ensure that local users' addresses have a domain.
 dnl ----------------------------------------------------------------------------
@@ -22,9 +29,19 @@ define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 PLAIN')dnl
 TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 PLAIN')dnl
 
 dnl ----------------------------------------------------------------------------
-dnl Privacy.
+dnl Security Layer (STARTTLS and SMTP over SSL).
+dnl
+dnl The server certificate/key is provided so that the passwords of clients
+dnl submitting mail through the MSA will be protected by an encrypted
+dnl connection.
+dnl
+dnl The client certificate/key is not provided since we do not want to attempt
+dnl TLS with any servers, including the local ISP.
 dnl ----------------------------------------------------------------------------
-define(`confPRIVACY_FLAGS', `goaway')dnl
+define(`confCACERT_PATH', `/etc/ssl')dnl
+define(`confCACERT',      `/etc/ssl/ca-bundle.pem')dnl
+define(`confSERVER_CERT', `/etc/ssl/private/server.pem')dnl
+define(`confSERVER_KEY',  `/etc/ssl/private/server.pem')dnl
 
 MAILER(local)dnl
 MAILER(smtp)dnl