1 # Exim test configuration 5802
7 .include DIR/aux-var/tls_conf_prefix
9 primary_hostname = myhost.test.ex
11 # ----- Main settings -----
14 acl_smtp_rcpt = accept
16 acl_smtp_rcpt = accept verify = recipient/callout
19 log_selector = +received_recipients +tls_certificate_verified +tls_sni
23 tls_advertise_hosts = *
25 # needed to force generation
26 tls_dhparam = historic
29 # Set certificate only if server
30 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
31 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
34 tls_certificate = ${if eq {SERVER}{server} \
35 {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
36 {CDIR2/fullchain.pem}\
37 {CDIR1/fullchain.pem}}}\
40 tls_privatekey = ${if eq {SERVER}{server} \
41 {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
42 {CDIR2/server1.example.com.unlocked.key}\
43 {CDIR1/server1.example.net.unlocked.key}}}\
52 condition = ${if eq {SERVER}{}}
53 dnssec_request_domains = *
55 transport = send_to_server
64 # ----- Transports -----
72 hosts_try_fastopen = :
75 hosts_require_dane = *
80 tls_verify_certificates =