Fix CVE-2016-1531
[exim.git] / test / confs / 2125
1 # Exim test configuration 2125
2
3 SERVER=
4
5 exim_path = EXIM_PATH
6 keep_environment =
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
11 gecos_pattern = ""
12 gecos_name = CALLER_NAME
13
14 # ----- Main settings -----
15
16 acl_smtp_rcpt = accept
17
18 log_selector =  +tls_peerdn+tls_certificate_verified
19
20 queue_only
21 queue_run_in_order
22
23 tls_advertise_hosts = *
24
25 tls_require_ciphers = ${if eq{$sender_host_address}{HOSTIPV4}\
26                       {AES}{!AES:3DES}}
27
28 # Set certificate only if server
29
30 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
31 tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
32
33
34 # ----- Routers -----
35
36 begin routers
37
38 client:
39   driver = accept
40   condition = ${if eq {SERVER}{server}{no}{yes}}
41   retry_use_local_part
42   transport = send_to_server
43
44
45 # ----- Transports -----
46
47 begin transports
48
49 send_to_server:
50   driver = smtp
51   allow_localhost
52   hosts = HOSTIPV4 : 127.0.0.1
53   hosts_require_tls = HOSTIPV4
54   tls_require_ciphers = DES-CBC3-SHA
55   port = PORT_D
56   tls_try_verify_hosts = :
57
58
59 # ----- Retry -----
60
61
62 begin retry
63
64 * * F,5d,10s
65
66
67 # End