1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:[...]:SSL alert number 40
25 ????554 Security failure
27 ??? 554 Security failure
28 <<< 554 Security failure
30 ????554 Security failure
35 ### No certificate, certificate optional at TLS time, required by ACL
36 Connecting to 127.0.0.1 port 1225 ... connected
38 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
41 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
55 Attempting to start TLS
56 SSL connection using ke-RSA-AES256-SHAnnn
57 Succeeded in starting TLS
60 <<< 250 myhost.test.ex Hello rhu.barb [127.0.0.1]
61 >>> mail from:<userx@test.ex>
64 >>> rcpt to:<userx@test.ex>
66 <<< 550 certificate not verified: peerdn=
69 <<< 221 myhost.test.ex closing connection
71 ### Good certificate, certificate required
72 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
73 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
74 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
76 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
79 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
93 Attempting to start TLS
94 SSL connection using ke-RSA-AES256-SHAnnn
95 Succeeded in starting TLS
96 >>> mail from:<userx@test.ex>
99 >>> rcpt to:<userx@test.ex>
104 <<< 221 myhost.test.ex closing connection
106 ### Good certificate, certificate optional at TLS time, checked by ACL
107 Connecting to 127.0.0.1 port 1225 ... connected
108 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
109 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
111 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
114 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
116 <<< 250-SIZE 52428800
128 Attempting to start TLS
129 SSL connection using ke-RSA-AES256-SHAnnn
130 Succeeded in starting TLS
131 >>> mail from:<userx@test.ex>
134 >>> rcpt to:<userx@test.ex>
139 <<< 221 myhost.test.ex closing connection
141 ### Bad certificate, certificate required
142 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
143 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
144 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
146 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
149 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
151 <<< 250-SIZE 52428800
163 Attempting to start TLS
164 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:[...]:SSL alert number 48
167 ????554 Security failure
169 ??? 554 Security failure
170 <<< 554 Security failure
172 ### Bad certificate, certificate optional at TLS time, reject at ACL time
173 Connecting to 127.0.0.1 port 1225 ... connected
174 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
175 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
177 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
180 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
182 <<< 250-SIZE 52428800
194 Attempting to start TLS
195 SSL connection using ke-RSA-AES256-SHAnnn
196 Succeeded in starting TLS
197 >>> mail from:<userx@test.ex>
200 >>> rcpt to:<userx@test.ex>
202 <<< 550 certificate not verified: peerdn=/CN=server1.example.net
205 <<< 221 myhost.test.ex closing connection
207 ### Otherwise good but revoked certificate, certificate required
208 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
209 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
210 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
212 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
215 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
217 <<< 250-SIZE 52428800
229 Attempting to start TLS
230 pppp:error:dddddddd:SSL routines:ssl3_read_bytes:sslv3 alert certificate revoked:[...]:SSL alert number 44
233 ????554 Security failure
235 ??? 554 Security failure
236 <<< 554 Security failure
238 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
239 Connecting to 127.0.0.1 port 1225 ... connected
240 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
241 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
243 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
246 <<< 250-myhost.test.ex Hello rhu.barb [127.0.0.1]
248 <<< 250-SIZE 52428800
260 Attempting to start TLS
261 SSL connection using ke-RSA-AES256-SHAnnn
262 Succeeded in starting TLS
263 >>> mail from:<userx@test.ex>
266 >>> rcpt to:<userx@test.ex>
268 <<< 550 certificate not verified: peerdn=/CN=revoked1.example.com
271 <<< 221 myhost.test.ex closing connection
273 ### Good certificate, certificate required - but nonmatching CRL also present
274 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
275 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
276 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
278 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
281 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
283 <<< 250-SIZE 52428800
295 Attempting to start TLS
296 SSL connection using ke-RSA-AES256-SHAnnn
297 Succeeded in starting TLS
298 >>> mail from:<userx@test.ex>
301 >>> rcpt to:<userx@test.ex>
306 <<< 221 myhost.test.ex closing connection
309 ******** SERVER ********
310 ### No certificate, certificate required
311 ### No certificate, certificate optional at TLS time, required by ACL
312 ### Good certificate, certificate required
313 ### Good certificate, certificate optional at TLS time, checked by ACL
314 ### Bad certificate, certificate required
315 ### Bad certificate, certificate optional at TLS time, reject at ACL time
316 ### Otherwise good but revoked certificate, certificate required
317 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
318 ### Good certificate, certificate required - but nonmatching CRL also present