1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu1.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 A TLS fatal alert has been received.
27 ### No certificate, certificate optional at TLS time, required by ACL
28 Connecting to 127.0.0.1 port 1225 ... connected
30 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
33 <<< 250-myhost.test.ex Hello rhu2.barb [127.0.0.1]
47 Attempting to start TLS
48 Succeeded in starting TLS
51 <<< 250 myhost.test.ex Hello rhu2tls.barb [127.0.0.1]
52 >>> mail from:<userx@test.ex>
55 >>> rcpt to:<userx@test.ex>
57 <<< 550 certificate not verified: peerdn=
60 <<< 221 myhost.test.ex closing connection
62 ### Good certificate, certificate required
63 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
64 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
65 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
67 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
70 <<< 250-myhost.test.ex Hello rhu3.barb [ip4.ip4.ip4.ip4]
84 Attempting to start TLS
85 Succeeded in starting TLS
86 >>> mail from:<userx@test.ex>
89 >>> rcpt to:<userx@test.ex>
94 <<< 221 myhost.test.ex closing connection
96 ### Good certificate, certificate optional at TLS time, checked by ACL
97 Connecting to 127.0.0.1 port 1225 ... connected
98 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
99 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
101 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
104 <<< 250-myhost.test.ex Hello rhu4.barb [127.0.0.1]
106 <<< 250-SIZE 52428800
118 Attempting to start TLS
119 Succeeded in starting TLS
120 >>> mail from:<userx@test.ex>
123 >>> rcpt to:<userx@test.ex>
128 <<< 221 myhost.test.ex closing connection
130 ### Bad certificate, certificate required
131 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
132 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
133 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
135 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
138 <<< 250-myhost.test.ex Hello rhu5.barb [ip4.ip4.ip4.ip4]
140 <<< 250-SIZE 52428800
152 Attempting to start TLS
153 A TLS fatal alert has been received.
158 ### Bad certificate, certificate optional at TLS time, reject at ACL time
159 Connecting to 127.0.0.1 port 1225 ... connected
160 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
161 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
163 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
166 <<< 250-myhost.test.ex Hello rhu6.barb [127.0.0.1]
168 <<< 250-SIZE 52428800
180 Attempting to start TLS
181 Succeeded in starting TLS
182 >>> mail from:<userx@test.ex>
185 >>> rcpt to:<userx@test.ex>
187 <<< 550 certificate not verified: peerdn=
190 <<< 221 myhost.test.ex closing connection
192 ### Otherwise good but revoked certificate, certificate required
193 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
194 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
195 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
197 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
200 <<< 250-myhost.test.ex Hello rhu7.barb [ip4.ip4.ip4.ip4]
202 <<< 250-SIZE 52428800
214 Attempting to start TLS
215 A TLS fatal alert has been received.
217 >>> mail from:<userx@test.ex>
219 <<< 554 Security failure
221 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
222 Connecting to 127.0.0.1 port 1225 ... connected
223 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
224 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
226 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
229 <<< 250-myhost.test.ex Hello rhu8.barb [127.0.0.1]
231 <<< 250-SIZE 52428800
243 Attempting to start TLS
244 Succeeded in starting TLS
245 >>> mail from:<userx@test.ex>
248 >>> rcpt to:<userx@test.ex>
250 <<< 550 certificate not verified: peerdn=CN=revoked1.example.com
253 <<< 221 myhost.test.ex closing connection
255 ### Good certificate, certificate required - but nonmatching CRL also present
256 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
257 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
258 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
260 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
263 <<< 250-myhost.test.ex Hello rhu9.barb [ip4.ip4.ip4.ip4]
265 <<< 250-SIZE 52428800
277 Attempting to start TLS
278 Succeeded in starting TLS
279 >>> mail from:<userx@test.ex>
282 >>> rcpt to:<userx@test.ex>
287 <<< 221 myhost.test.ex closing connection
290 ******** SERVER ********
291 ### No certificate, certificate required
292 ### No certificate, certificate optional at TLS time, required by ACL
293 ### Good certificate, certificate required
294 ### Good certificate, certificate optional at TLS time, checked by ACL
295 ### Bad certificate, certificate required
296 ### Bad certificate, certificate optional at TLS time, reject at ACL time
297 ### Otherwise good but revoked certificate, certificate required
298 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
299 ### Good certificate, certificate required - but nonmatching CRL also present