5172ff2795ae045915051e946052c2c371163534
[exim.git] / test / confs / 5601
1 # Exim test configuration 5601
2 # OCSP stapling, client
3
4 SERVER =
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = server1.example.com
9 rfc1413_query_timeout = 0s
10 spool_directory = DIR/spool
11 log_file_path = DIR/spool/log/SERVER%slog
12 gecos_pattern = ""
13 gecos_name = CALLER_NAME
14
15
16 # ----- Main settings -----
17
18 domainlist local_domains = test.ex : *.test.ex
19
20 acl_smtp_rcpt = check_recipient
21 log_selector = +tls_peerdn
22 remote_max_parallel = 1
23
24 tls_advertise_hosts = *
25
26 # Set certificate only if server
27
28 tls_certificate = ${if eq {SERVER}{server}\
29 {DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem}\
30 fail\
31 }
32
33 #{DIR/aux-fixed/exim-ca/example.com/CA/CA.pem}\
34
35 tls_privatekey = ${if eq {SERVER}{server}\
36 {DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key}\
37 fail}
38
39 tls_ocsp_file = OCSP
40
41
42 # ------ ACL ------
43
44 begin acl
45
46 check_recipient:
47   accept  domains = +local_domains
48   deny    message = relay not permitted
49
50
51 # ----- Routers -----
52
53 begin routers
54
55 client:
56   driver = accept
57   condition = ${if eq {SERVER}{server}{no}{yes}}
58   retry_use_local_part
59   transport = send_to_server${if eq{$local_part}{nostaple}{1} \
60                                 {${if eq{$local_part}{smtps} {3}{2}}} \
61                              }
62
63 server:
64   driver = redirect
65   data = :blackhole:
66   #retry_use_local_part
67   #transport = local_delivery
68
69
70 # ----- Transports -----
71
72 begin transports
73
74 local_delivery:
75   driver = appendfile
76   file = DIR/test-mail/$local_part
77   headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn
78   user = CALLER
79
80 send_to_server1:
81   driver = smtp
82   allow_localhost
83   hosts = HOSTIPV4
84   port = PORT_D
85   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
86   hosts_require_tls = *
87 # note no ocsp here
88
89 send_to_server2:
90   driver = smtp
91   allow_localhost
92   hosts = 127.0.0.1
93   port = PORT_D
94   helo_data = helo.data.changed
95   #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem
96   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
97   hosts_require_tls =  *
98   hosts_require_ocsp = *
99
100 send_to_server3:
101   driver = smtp
102   allow_localhost
103   hosts = 127.0.0.1
104   port = PORT_D
105   helo_data = helo.data.changed
106   #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem
107   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
108   protocol =           smtps
109   hosts_require_tls =  *
110   hosts_require_ocsp = *
111
112
113 # ----- Retry -----
114
115
116 begin retry
117
118 * * F,5d,1s
119
120
121 # End