1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:[...]:SSL alert number 40
25 ????554 Security failure
27 ??? 554 Security failure
28 <<< 554 Security failure
30 ????554 Security failure
35 ### No certificate, certificate optional at TLS time, required by ACL
36 Connecting to 127.0.0.1 port 1225 ... connected
38 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
41 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
55 Attempting to start TLS
56 Succeeded in starting TLS
59 <<< 250 myhost.test.ex Hello rhu.barb [127.0.0.1]
60 >>> mail from:<userx@test.ex>
63 >>> rcpt to:<userx@test.ex>
65 <<< 550 certificate not verified: peerdn=
68 <<< 221 myhost.test.ex closing connection
70 ### Good certificate, certificate required
71 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
72 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
73 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
75 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
78 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
92 Attempting to start TLS
93 Succeeded in starting TLS
94 >>> mail from:<userx@test.ex>
97 >>> rcpt to:<userx@test.ex>
102 <<< 221 myhost.test.ex closing connection
104 ### Good certificate, certificate optional at TLS time, checked by ACL
105 Connecting to 127.0.0.1 port 1225 ... connected
106 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
107 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
109 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
112 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
114 <<< 250-SIZE 52428800
126 Attempting to start TLS
127 Succeeded in starting TLS
128 >>> mail from:<userx@test.ex>
131 >>> rcpt to:<userx@test.ex>
136 <<< 221 myhost.test.ex closing connection
138 ### Bad certificate, certificate required
139 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
140 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
141 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
143 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
146 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
148 <<< 250-SIZE 52428800
160 Attempting to start TLS
161 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:[...]:SSL alert number 48
164 ????554 Security failure
166 ??? 554 Security failure
167 <<< 554 Security failure
169 ### Bad certificate, certificate optional at TLS time, reject at ACL time
170 Connecting to 127.0.0.1 port 1225 ... connected
171 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
172 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
174 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
177 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
179 <<< 250-SIZE 52428800
191 Attempting to start TLS
192 Succeeded in starting TLS
193 >>> mail from:<userx@test.ex>
196 >>> rcpt to:<userx@test.ex>
198 <<< 550 certificate not verified: peerdn=/CN=server1.example.net
201 <<< 221 myhost.test.ex closing connection
203 ### Otherwise good but revoked certificate, certificate required
204 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
205 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
206 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
208 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
211 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
213 <<< 250-SIZE 52428800
225 Attempting to start TLS
226 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:sslv3 alert certificate revoked:[...]:SSL alert number 44
229 ????554 Security failure
231 ??? 554 Security failure
232 <<< 554 Security failure
234 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
235 Connecting to 127.0.0.1 port 1225 ... connected
236 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
237 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
239 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
242 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
244 <<< 250-SIZE 52428800
256 Attempting to start TLS
257 Succeeded in starting TLS
258 >>> mail from:<userx@test.ex>
261 >>> rcpt to:<userx@test.ex>
263 <<< 550 certificate not verified: peerdn=/CN=revoked1.example.com
266 <<< 221 myhost.test.ex closing connection
268 ### Good certificate, certificate required - but nonmatching CRL also present
269 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
270 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
271 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
273 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
276 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
278 <<< 250-SIZE 52428800
290 Attempting to start TLS
291 Succeeded in starting TLS
292 >>> mail from:<userx@test.ex>
295 >>> rcpt to:<userx@test.ex>
300 <<< 221 myhost.test.ex closing connection
303 ******** SERVER ********
304 ### No certificate, certificate required
305 ### No certificate, certificate optional at TLS time, required by ACL
306 ### Good certificate, certificate required
307 ### Good certificate, certificate optional at TLS time, checked by ACL
308 ### Bad certificate, certificate required
309 ### Bad certificate, certificate optional at TLS time, reject at ACL time
310 ### Otherwise good but revoked certificate, certificate required
311 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
312 ### Good certificate, certificate required - but nonmatching CRL also present