HP-UX Mailing Services Administrator's Guide (B2355-91064)

True or False. Following is the option in the
sendmail.cf file:
# O UseTLS=False
CERT_DIR
Specifies the directory for storing Sendmail
certificates. Following is the option in the
sendmail.cf file:
# CA directory
O CACertPath=/etc/mail/certs/
CACERT_PATH
Specifies the path that stores the certificates of
all the Certificate Authorities known to the
Sendmail server.
CACERT
Specifies the file containing the certificate of the
Certificate Authority that issued the certificate
to the Sendmail server.
SERVER_CERT and CLIENT_CERT
Refers to the server and client certificate. These
variables indicate that the certificate of the server
is used when Sendmail is acting as a server, and
the certificate of the client is used when Sendmail
is acting as a client. Following is the option in
the sendmail.cf file:
# Server Cert
OServerCertFile=/etc/mail/certs/oldcert.pem
# Client Cert
OClientCertFile=/etc/mail/certs/oldcert.pem
SERVER_KEY and CLIENT_KEY
Specifies the private keys that correspond to the
certificates of the Sendmail server. Following is
the option in the sendmail.cf file:
# Server private key
O
ServerKeyFile=/etc/mail/certs/oldreq.pem
# Client private key
O
ClientKeyFile=/etc/mail/certs/oldreq.pem
You can use the /usr/newconfig/etc/mail/cf/cf/gen_cf script to generate
the sendmail.cf configuration file that supports the STARTTLS feature. The generated
configuration file contains all the STARTTLS options. However, these options contain
default values and are commented by default. The gen_cf script provides an option
to change the default values. If you change the default values for a particular option,
Security 79