Docs: tweak ARC description
[exim.git] / test / confs / 5840
1 # Exim test configuration 5840
2 # DANE/OpenSSL
3
4 SERVER=
5
6 .include DIR/aux-var/tls_conf_prefix
7
8 primary_hostname = myhost.test.ex
9
10 # ----- Main settings -----
11
12 .ifndef OPT
13 acl_smtp_rcpt = accept logwrite = "rcpt ACL"
14 .else
15 acl_smtp_rcpt = accept verify = recipient/callout
16 .endif
17
18 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
19
20 queue_run_in_order
21
22 tls_advertise_hosts = *
23
24 # Set certificate only if server
25 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
26 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
27
28 .ifdef CERT
29 tls_certificate = CERT
30 .else
31 tls_certificate = ${if eq {SERVER}{server} \
32         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
33                 {CDIR2/fullchain.pem}\
34                 {CDIR1/fullchain.pem}}}\
35         fail}
36 .endif
37
38 .ifdef ALLOW
39 tls_privatekey = ALLOW
40 .else
41 tls_privatekey = ${if eq {SERVER}{server} \
42         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
43                 {CDIR2/server1.example.com.unlocked.key}\
44                 {CDIR1/server1.example.net.unlocked.key}}}\
45         fail}
46 .endif
47
48 # ----- Routers -----
49
50 begin routers
51
52 client:
53   driver = dnslookup
54   condition = ${if eq {SERVER}{}}
55   dnssec_request_domains = *
56   self = send
57   transport = send_to_server
58   errors_to = ""
59
60 server:
61   driver = redirect
62   data = :blackhole:
63
64
65 # ----- Transports -----
66
67 begin transports
68
69 send_to_server:
70   driver = smtp
71   allow_localhost
72   port = PORT_D
73
74   hosts_try_dane =     *
75   hosts_require_dane = HOSTIPV4
76   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
77   tls_try_verify_hosts = thishost.test.ex
78   tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}}
79
80
81
82 # ----- Retry -----
83
84
85 begin retry
86
87 * * F,5d,10s
88
89
90 # End