Fix CVE-2016-1531
[exim.git] / test / confs / 2131
1 # Exim test configuration 2131
2 # SNI
3
4 SERVER =
5
6 exim_path = EXIM_PATH
7 keep_environment =
8 host_lookup_order = bydns
9 primary_hostname = myhost.test.ex
10 rfc1413_query_timeout = 0s
11 spool_directory = DIR/spool
12 log_file_path = DIR/spool/log/SERVER%slog
13 gecos_pattern = ""
14 gecos_name = CALLER_NAME
15
16
17 # ----- Main settings -----
18
19 domainlist local_domains = test.ex : *.test.ex
20
21 acl_smtp_rcpt = acl_log_sni
22 log_selector = +tls_peerdn +tls_sni +received_recipients
23 remote_max_parallel = 1
24
25 tls_advertise_hosts = *
26
27 # Set certificate only if server
28
29 tls_certificate = ${if eq {SERVER}{server} \
30         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
31             {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
32             {cert1} \
33                         }\
34         }fail}
35
36 tls_privatekey = ${if eq {SERVER}{server} \
37         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
38             {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
39             {cert1} \
40                         }\
41         }fail}
42
43
44 # ------ ACL ------
45
46 begin acl
47
48 acl_log_sni:
49   accept
50          logwrite = SNI <$tls_in_sni>
51
52 # ----- Routers -----
53
54 begin routers
55
56 client:
57   driver = accept
58   condition = ${if !eq {SERVER}{server}}
59   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
60
61 server:
62   driver = redirect
63   data = :blackhole:
64
65
66 # ----- Transports -----
67
68 begin transports
69
70 send_to_server1:
71   driver = smtp
72   allow_localhost
73   hosts = HOSTIPV4
74   port = PORT_D
75   tls_sni = fred
76   hosts_require_tls = *
77
78 send_to_server2:
79   driver = smtp
80   allow_localhost
81   hosts = HOSTIPV4
82   port = PORT_D
83   tls_sni = bill
84   hosts_require_tls = *
85
86
87 # ----- Retry -----
88
89
90 begin retry
91
92 * * F,5d,10s
93
94
95 # End