Disable certificate extension check?

Stefan Langeder via Exim-users <[email protected]> Tue, 27 Jan 2026 07:15:56 -0000

Newsgroups	gmane.mail.exim.user
Message-ID	<176949815672.264.8074217071136103498@mailman>

Dear all,

I have a question regarding certificate validation:

I found following error in our exim logs:

SSL verify error: depth=0 error=unsuitable certificate purpose cert=***

It seems the problem is that we use an ACL with the condition “verify=certificate” and that the certificate used by the sender is missing the certificate extension “Client Authentication (1.3.6.1.5.5.7.3.2)” .

My question is: Is there any way to configure exim to ignore that the certificate extension is missing?

Thank you + best regards,
Stefan

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki