Certificate-related routines only present when TLS is supported
[exim.git] / test / confs / 5650
1 # Exim test configuration 5650
2 # OCSP stapling, server
3
4 CRL=
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = server1.example.com
9 rfc1413_query_timeout = 0s
10 spool_directory = DIR/spool
11 log_file_path = DIR/spool/log/%slog
12 gecos_pattern = ""
13 gecos_name = CALLER_NAME
14
15 # ----- Main settings -----
16
17 acl_smtp_connect = check_connect
18 acl_smtp_mail = check_mail
19 acl_smtp_rcpt = check_recipient
20
21 log_selector = +tls_peerdn
22
23 queue_only
24 queue_run_in_order
25
26 tls_advertise_hosts = *
27
28 tls_certificate = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem
29 tls_privatekey = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
30 tls_crl = CRL
31 tls_ocsp_file = OCSP
32
33 #tls_verify_hosts = HOSTIPV4
34 #tls_try_verify_hosts = *
35 #tls_verify_certificates = DIR/aux-fixed/cert2
36
37
38
39 # ------ ACL ------
40
41 begin acl
42
43 check_connect:
44   accept   logwrite = acl_conn: ocsp in status: $tls_in_ocsp
45
46 check_mail:
47   accept   logwrite = acl_mail: ocsp in status: $tls_in_ocsp
48
49 check_recipient:
50   accept
51
52
53 # ----- Routers -----
54
55 begin routers
56
57 abc:
58   driver = accept
59   retry_use_local_part
60   transport = local_delivery
61
62
63 # ----- Transports -----
64
65 begin transports
66
67 local_delivery:
68   driver = appendfile
69   file = DIR/test-mail/$local_part
70   headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn
71   user = CALLER
72
73 # End