How to configure TLS in Exim4?

Question

linux

Please tell me how to set up TLS in Exim4

System: Debian 10
MTA: Exim 4.92

I created a certificate for 3 months in zerossl.com
In the /etc/exim4 folder I made 2 files into which I copied the certificates:

/etc/exim4/exim.crt
/etc/exim4/exim.key

In the settings file (exim4.conf) I specified the following data:

CONFDIR = /etc/exim4
tls_advertise_hosts = *
tls_certificate = CONFDIR/exim.crt
tls_privatekey = CONFDIR/exim.key

Can you please tell me if I configured TLS correctly? How can this be checked?
Now when I send a letter from my server to Yandex, I see in the message headers:
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
(Client certificate not present)

Answer 1

When you send from your server to Yandex, Yandex encryption settings are used. About the same as when you go to the site, you use the site's encryption settings.