test/confs/5802

   1 # Exim test configuration 5802
   2 # DANE and MX chains
   3
   4 SERVER=
   5 OPT=
   6
   7 .include DIR/aux-var/tls_conf_prefix
   8
   9 primary_hostname = myhost.test.ex
  10
  11 # ----- Main settings -----
  12
  13 .ifndef OPT
  14 acl_smtp_rcpt = accept
  15 .else
  16 acl_smtp_rcpt = accept verify = recipient/callout
  17 .endif
  18
  19 log_selector =  +received_recipients +tls_certificate_verified +tls_sni
  20
  21 queue_run_in_order
  22
  23 tls_advertise_hosts = *
  24 .ifdef _HAVE_GNUTLS
  25 # needed to force generation
  26 tls_dhparam = historic
  27 .endif
  28
  29 # Set certificate only if server
  30 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
  31 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
  32
  33
  34 tls_certificate = ${if eq {SERVER}{server} \
  35         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
  36                 {CDIR2/fullchain.pem}\
  37                 {CDIR1/fullchain.pem}}}\
  38         fail}
  39
  40 tls_privatekey = ${if eq {SERVER}{server} \
  41         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
  42                 {CDIR2/server1.example.com.unlocked.key}\
  43                 {CDIR1/server1.example.net.unlocked.key}}}\
  44         fail}
  45
  46 # ----- Routers -----
  47
  48 begin routers
  49
  50 client:
  51   driver =      dnslookup
  52   condition =   ${if eq {SERVER}{}}
  53   dnssec_request_domains = *
  54   self =        send
  55   transport =   send_to_server
  56   errors_to =   ""
  57   no_more
  58
  59 server:
  60   driver =      redirect
  61   data =        :blackhole:
  62
  63
  64 # ----- Transports -----
  65
  66 begin transports
  67
  68 send_to_server:
  69   driver =              smtp
  70   allow_localhost
  71   port =                PORT_D
  72   hosts_try_fastopen =  :
  73
  74 .ifdef REQUIRE_DANE
  75   hosts_require_dane =  *
  76 .else
  77   hosts_try_dane     =  *
  78 .endif
  79   tls_sni =             OPT
  80   tls_verify_certificates =
  81
  82
  83
  84 # ----- Retry -----
  85
  86
  87 begin retry
  88
  89 * * F,5d,10s
  90
  91
  92 # End