Merge branch 'master' of ssh://git.exim.org/home/git/exim
[users/jgh/exim.git] / test / confs / 5860
1 # Exim test configuration 5860
2 # DANE
3
4 SERVER=
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 rfc1413_query_timeout = 0s
10 spool_directory = DIR/spool
11 log_file_path = DIR/spool/log/SERVER%slog
12 gecos_pattern = ""
13 gecos_name = CALLER_NAME
14
15 # ----- Main settings -----
16
17 acl_smtp_rcpt = accept
18
19 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
20
21 queue_only
22 queue_run_in_order
23
24 tls_advertise_hosts = *
25
26 # Set certificate only if server
27 CDIR1 = DIR/aux-fixed
28 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
29
30 tls_certificate = ${if eq {SERVER}{server} \
31         {${if eq {DETAILS}{ta} \
32                 {CDIR2/fullchain.pem}\
33                 {CDIR1/cert1}}}\
34         fail}
35
36 tls_privatekey = ${if eq {SERVER}{server} \
37         {${if eq {DETAILS}{ta} \
38                 {CDIR2/server1.example.com.unlocked.key}\
39                 {CDIR1/cert1}}}\
40         fail}
41
42
43 begin acl
44
45 logger:
46   accept condition = ${if eq {tls} {${listextract{1}{$tpda_event}}}}
47          logwrite = $tpda_event depth = $tpda_data \
48                         <${certextract {subject} {$tls_out_peercert}}>
49 #  message = noooo
50
51   accept condition = ${if eq {msg} {${listextract{1}{$tpda_event}}}}
52          logwrite = $tpda_event dane=$tls_out_dane
53   accept
54
55 # ----- Routers -----
56
57 begin routers
58
59 client:
60   driver = dnslookup
61   condition = ${if eq {SERVER}{}}
62   dnssec_request_domains = *
63   self = send
64   transport = send_to_server
65
66 server:
67   driver = redirect
68   data = :blackhole:
69
70
71 # ----- Transports -----
72
73 begin transports
74
75 send_to_server:
76   driver = smtp
77   allow_localhost
78   port = PORT_D
79
80 #  hosts_try_dane = *
81   hosts_require_dane = *
82   hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
83                                  {= {0}{$tls_out_tlsa_usage}} } \
84                         {*}{}}
85
86   tpda_event_action =   ${acl {logger}}
87
88 # End