DANE - testcase for fail under GnuTLS with TA-mode to a selfsigned server cert
[exim.git] / test / confs / 5842
1 # Exim test configuration 5822
2 # DANE/OpenSSL
3
4 SERVER=
5
6 .include DIR/aux-var/tls_conf_prefix
7
8 primary_hostname = myhost.test.ex
9
10 # ----- Main settings -----
11
12 acl_smtp_rcpt = accept logwrite = "rcpt ACL"
13
14 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
15
16 queue_run_in_order
17
18 tls_advertise_hosts = *
19
20 tls_certificate = ${if eq {SERVER}{server} {DIR/aux-fixed/cert1} fail}
21
22 # ----- Routers -----
23
24 begin routers
25
26 client:
27   driver = dnslookup
28   condition = ${if eq {SERVER}{}}
29   dnssec_request_domains = *
30   self = send
31   transport = send_to_server
32   errors_to = ""
33
34 server:
35   driver = redirect
36   data = :blackhole:
37
38
39 # ----- Transports -----
40
41 begin transports
42
43 send_to_server:
44   driver = smtp
45   allow_localhost
46   port = PORT_D
47
48   hosts_try_dane =     *
49   hosts_require_dane = HOSTIPV4
50   tls_verify_cert_hostnames = :
51   tls_try_verify_hosts = thishost.test.ex
52 #  tls_verify_certificates = CDIR2/ca_chain.pem
53
54
55
56 # ----- Retry -----
57
58
59 begin retry
60
61 * * F,5d,10s
62
63
64 # End