1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu1.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 A TLS fatal alert has been received.
27 ### No certificate, certificate optional at TLS time, required by ACL
28 Connecting to 127.0.0.1 port 1225 ... connected
30 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
33 <<< 250-myhost.test.ex Hello rhu2.barb [127.0.0.1]
47 Attempting to start TLS
48 Succeeded in starting TLS
51 <<< 250 myhost.test.ex Hello rhu2tls.barb [127.0.0.1]
52 >>> mail from:<userx@test.ex>
55 >>> rcpt to:<userx@test.ex>
57 <<< 550 certificate not verified: peerdn=
60 <<< 221 myhost.test.ex closing connection
62 ### Good certificate, certificate required
63 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
64 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
65 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
67 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
70 <<< 250-myhost.test.ex Hello rhu3.barb [ip4.ip4.ip4.ip4]
84 Attempting to start TLS
85 Succeeded in starting TLS
88 <<< 250 myhost.test.ex Hello test [ip4.ip4.ip4.ip4]
89 >>> mail from:<userx@test.ex>
92 >>> rcpt to:<userx@test.ex>
97 <<< 221 myhost.test.ex closing connection
99 ### Good certificate, certificate optional at TLS time, checked by ACL
100 Connecting to 127.0.0.1 port 1225 ... connected
101 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
102 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
104 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
107 <<< 250-myhost.test.ex Hello rhu4.barb [127.0.0.1]
109 <<< 250-SIZE 52428800
121 Attempting to start TLS
122 Succeeded in starting TLS
125 <<< 250 myhost.test.ex Hello test [127.0.0.1]
126 >>> mail from:<userx@test.ex>
129 >>> rcpt to:<userx@test.ex>
134 <<< 221 myhost.test.ex closing connection
136 ### Bad certificate, certificate required
137 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
138 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
139 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
141 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
144 <<< 250-myhost.test.ex Hello rhu5.barb [ip4.ip4.ip4.ip4]
146 <<< 250-SIZE 52428800
158 Attempting to start TLS
159 A TLS fatal alert has been received.
164 ### Bad certificate, certificate optional at TLS time, reject at ACL time
165 Connecting to 127.0.0.1 port 1225 ... connected
166 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
167 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
169 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
172 <<< 250-myhost.test.ex Hello rhu6.barb [127.0.0.1]
174 <<< 250-SIZE 52428800
186 Attempting to start TLS
187 Succeeded in starting TLS
190 <<< 250 myhost.test.ex Hello test [127.0.0.1]
191 >>> mail from:<userx@test.ex>
194 >>> rcpt to:<userx@test.ex>
196 <<< 550 certificate not verified: peerdn=
199 <<< 221 myhost.test.ex closing connection
201 ### Otherwise good but revoked certificate, certificate required
202 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
203 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
204 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
206 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
209 <<< 250-myhost.test.ex Hello rhu7.barb [ip4.ip4.ip4.ip4]
211 <<< 250-SIZE 52428800
223 Attempting to start TLS
224 A TLS fatal alert has been received.
228 <<< 554 Security failure
230 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
231 Connecting to 127.0.0.1 port 1225 ... connected
232 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
233 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
235 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
238 <<< 250-myhost.test.ex Hello rhu8.barb [127.0.0.1]
240 <<< 250-SIZE 52428800
252 Attempting to start TLS
253 Succeeded in starting TLS
256 <<< 250 myhost.test.ex Hello test [127.0.0.1]
257 >>> mail from:<userx@test.ex>
260 >>> rcpt to:<userx@test.ex>
262 <<< 550 certificate not verified: peerdn=CN=revoked1.example.com
265 <<< 221 myhost.test.ex closing connection
267 ### Good certificate, certificate required - but nonmatching CRL also present
268 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
269 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
270 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
272 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
275 <<< 250-myhost.test.ex Hello rhu9.barb [ip4.ip4.ip4.ip4]
277 <<< 250-SIZE 52428800
289 Attempting to start TLS
290 Succeeded in starting TLS
293 <<< 250 myhost.test.ex Hello test [ip4.ip4.ip4.ip4]
294 >>> mail from:<userx@test.ex>
297 >>> rcpt to:<userx@test.ex>
302 <<< 221 myhost.test.ex closing connection
305 ******** SERVER ********
306 ### No certificate, certificate required
307 ### No certificate, certificate optional at TLS time, required by ACL
308 ### Good certificate, certificate required
309 ### Good certificate, certificate optional at TLS time, checked by ACL
310 ### Bad certificate, certificate required
311 ### Bad certificate, certificate optional at TLS time, reject at ACL time
312 ### Otherwise good but revoked certificate, certificate required
313 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
314 ### Good certificate, certificate required - but nonmatching CRL also present