test/confs/5601

   1 # Exim test configuration 5601
   2 # OCSP stapling, client
   3
   4 SERVER =
   5
   6 exim_path = EXIM_PATH
   7 host_lookup_order = bydns
   8 primary_hostname = server1.example.com
   9 rfc1413_query_timeout = 0s
  10 spool_directory = DIR/spool
  11 log_file_path = DIR/spool/log/SERVER%slog
  12 gecos_pattern = ""
  13 gecos_name = CALLER_NAME
  14
  15
  16 # ----- Main settings -----
  17
  18 domainlist local_domains = test.ex : *.test.ex
  19
  20 acl_smtp_rcpt = check_recipient
  21 log_selector = +tls_peerdn
  22 remote_max_parallel = 1
  23
  24 tls_advertise_hosts = *
  25
  26 # Set certificate only if server
  27
  28 tls_certificate = ${if eq {SERVER}{server}\
  29 {DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem}\
  30 fail\
  31 }
  32
  33 #{DIR/aux-fixed/exim-ca/example.com/CA/CA.pem}\
  34
  35 tls_privatekey = ${if eq {SERVER}{server}\
  36 {DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key}\
  37 fail}
  38
  39 tls_ocsp_file = OCSP
  40
  41
  42 # ------ ACL ------
  43
  44 begin acl
  45
  46 check_recipient:
  47   accept  domains = +local_domains
  48   deny    message = relay not permitted
  49
  50
  51 # ----- Routers -----
  52
  53 begin routers
  54
  55 client:
  56   driver = accept
  57   condition = ${if eq {SERVER}{server}{no}{yes}}
  58   retry_use_local_part
  59   transport = send_to_server${if eq{$local_part}{nostaple}{1} \
  60                                 {${if eq{$local_part}{smtps} {3}{2}}} \
  61                              }
  62
  63 server:
  64   driver = redirect
  65   data = :blackhole:
  66   #retry_use_local_part
  67   #transport = local_delivery
  68
  69
  70 # ----- Transports -----
  71
  72 begin transports
  73
  74 local_delivery:
  75   driver = appendfile
  76   file = DIR/test-mail/$local_part
  77   headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn
  78   user = CALLER
  79
  80 send_to_server1:
  81   driver = smtp
  82   allow_localhost
  83   hosts = HOSTIPV4
  84   port = PORT_D
  85   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
  86   hosts_require_tls = *
  87 # note no ocsp here
  88
  89 send_to_server2:
  90   driver = smtp
  91   allow_localhost
  92   hosts = 127.0.0.1
  93   port = PORT_D
  94   helo_data = helo.data.changed
  95   #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem
  96   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
  97   hosts_require_tls =  *
  98   hosts_require_ocsp = *
  99
 100 send_to_server3:
 101   driver = smtp
 102   allow_localhost
 103   hosts = 127.0.0.1
 104   port = PORT_D
 105   helo_data = helo.data.changed
 106   #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem
 107   tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem
 108   protocol =           smtps
 109   hosts_require_tls =  *
 110   hosts_require_ocsp = *
 111
 112
 113 # ----- Retry -----
 114
 115
 116 begin retry
 117
 118 * * F,5d,1s
 119
 120
 121 # End