TLS: Session resumption, under the EXPERIMENTAL_TLS_RESUME build option.
[exim.git] / test / confs / 5890
1 # Exim test configuration 5890
2
3 SERVER =
4 OPTION = NORMAL
5
6 .include DIR/aux-var/tls_conf_prefix
7
8 primary_hostname = myhost.test.ex
9
10 # ----- Main settings -----
11
12 domainlist local_domains = test.ex : *.test.ex
13
14 acl_smtp_helo = check_helo
15 acl_smtp_rcpt = check_recipient
16 log_selector = +received_recipients +tls_resumption
17
18 tls_advertise_hosts = *
19
20 # Set certificate only if server
21
22 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
23
24 tls_require_ciphers = OPTION
25 tls_resumption_hosts = 127.0.0.1
26
27
28 # ------ ACL ------
29
30 begin acl
31
32 check_helo:
33   accept  condition =   ${if def:tls_in_cipher}
34           logwrite =    tls_in_resumption ${listextract {$tls_in_resumption} {_RESUME_DECODE}}
35   accept
36
37 check_recipient:
38   accept  domains =     +local_domains
39   deny    message =     relay not permitted
40
41 log_resumption:
42   accept condition =    ${if def:tls_out_cipher}
43          condition =    ${if eq {$event_name}{tcp:close}}
44          logwrite =     tls_out_resumption ${listextract {$tls_out_resumption} {_RESUME_DECODE}}
45
46
47 # ----- Routers -----
48
49 begin routers
50
51 client:
52   driver = accept
53   condition = ${if eq {SERVER}{server}{no}{yes}}
54   retry_use_local_part
55   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
56
57 server:
58   driver = redirect
59   data = :blackhole:
60
61 # ----- Transports -----
62
63 begin transports
64
65 send_to_server1:
66   driver = smtp
67   allow_localhost
68   hosts = 127.0.0.1
69   port = PORT_D
70   helo_data = helo.data.changed
71 .ifdef VALUE
72   tls_resumption_hosts = *
73 .else
74   tls_resumption_hosts = :
75 .endif
76   event_action =        ${acl {log_resumption}}
77
78 send_to_server2:
79   driver = smtp
80   allow_localhost
81   hosts = HOSTIPV4
82   port = PORT_D
83   event_action =        ${acl {log_resumption}}
84
85
86 # ----- Retry -----
87
88
89 begin retry
90
91 * * F,5d,10s
92
93
94 # End