1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu1.barb [ip4.ip4.ip4.ip4]
11 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
23 Attempting to start TLS
24 gnutls_record_recv: A TLS fatal alert has been received.
29 ### No certificate, certificate optional at TLS time, required by ACL
30 Connecting to 127.0.0.1 port 1225 ... connected
32 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
35 <<< 250-myhost.test.ex Hello rhu2.barb [127.0.0.1]
39 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
51 Attempting to start TLS
52 Succeeded in starting TLS
55 <<< 250 myhost.test.ex Hello rhu2tls.barb [127.0.0.1]
56 >>> mail from:<userx@test.ex>
59 >>> rcpt to:<userx@test.ex>
61 <<< 550 certificate not verified: peerdn=
64 <<< 221 myhost.test.ex closing connection
66 ### Good certificate, certificate required
67 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
68 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
69 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
71 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
74 <<< 250-myhost.test.ex Hello rhu3.barb [ip4.ip4.ip4.ip4]
78 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
90 Attempting to start TLS
91 Succeeded in starting TLS
94 <<< 250 myhost.test.ex Hello test [ip4.ip4.ip4.ip4]
95 >>> mail from:<userx@test.ex>
98 >>> rcpt to:<userx@test.ex>
103 <<< 221 myhost.test.ex closing connection
105 ### Good certificate, certificate optional at TLS time, checked by ACL
106 Connecting to 127.0.0.1 port 1225 ... connected
107 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
108 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
110 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
113 <<< 250-myhost.test.ex Hello rhu4.barb [127.0.0.1]
115 <<< 250-SIZE 52428800
117 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
129 Attempting to start TLS
130 Succeeded in starting TLS
133 <<< 250 myhost.test.ex Hello test [127.0.0.1]
134 >>> mail from:<userx@test.ex>
137 >>> rcpt to:<userx@test.ex>
142 <<< 221 myhost.test.ex closing connection
144 ### Bad certificate, certificate required
145 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
146 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
147 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
149 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
152 <<< 250-myhost.test.ex Hello rhu5.barb [ip4.ip4.ip4.ip4]
154 <<< 250-SIZE 52428800
156 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
168 Attempting to start TLS
169 gnutls_record_recv: A TLS fatal alert has been received.
174 ### Bad certificate, certificate optional at TLS time, reject at ACL time
175 Connecting to 127.0.0.1 port 1225 ... connected
176 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
177 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
179 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
182 <<< 250-myhost.test.ex Hello rhu6.barb [127.0.0.1]
184 <<< 250-SIZE 52428800
186 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
198 Attempting to start TLS
199 Succeeded in starting TLS
202 <<< 250 myhost.test.ex Hello test [127.0.0.1]
203 >>> mail from:<userx@test.ex>
206 >>> rcpt to:<userx@test.ex>
208 <<< 550 certificate not verified: peerdn=
211 <<< 221 myhost.test.ex closing connection
213 ### Otherwise good but revoked certificate, certificate required
214 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
215 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
216 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
218 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
221 <<< 250-myhost.test.ex Hello rhu7.barb [ip4.ip4.ip4.ip4]
223 <<< 250-SIZE 52428800
225 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
237 Attempting to start TLS
239 ??? 554 Security failure
240 <<< 554 Security failure
244 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
245 Connecting to 127.0.0.1 port 1225 ... connected
246 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
247 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
249 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
252 <<< 250-myhost.test.ex Hello rhu8.barb [127.0.0.1]
254 <<< 250-SIZE 52428800
256 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
268 Attempting to start TLS
269 Succeeded in starting TLS
272 <<< 250 myhost.test.ex Hello test [127.0.0.1]
273 >>> mail from:<userx@test.ex>
276 >>> rcpt to:<userx@test.ex>
278 <<< 550 certificate not verified: peerdn=CN=revoked1.example.com
281 <<< 221 myhost.test.ex closing connection
283 ### Good certificate, certificate required - but nonmatching CRL also present
284 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
285 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
286 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
288 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
291 <<< 250-myhost.test.ex Hello rhu9.barb [ip4.ip4.ip4.ip4]
293 <<< 250-SIZE 52428800
295 <<< 250-LIMITS MAILMAX=1000 RCPTMAX=50000
307 Attempting to start TLS
308 Succeeded in starting TLS
311 <<< 250 myhost.test.ex Hello test [ip4.ip4.ip4.ip4]
312 >>> mail from:<userx@test.ex>
315 >>> rcpt to:<userx@test.ex>
320 <<< 221 myhost.test.ex closing connection
323 ******** SERVER ********
324 ### No certificate, certificate required
325 ### No certificate, certificate optional at TLS time, required by ACL
326 ### Good certificate, certificate required
327 ### Good certificate, certificate optional at TLS time, checked by ACL
328 ### Bad certificate, certificate required
329 ### Bad certificate, certificate optional at TLS time, reject at ACL time
330 ### Otherwise good but revoked certificate, certificate required
331 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
332 ### Good certificate, certificate required - but nonmatching CRL also present