# Exim test configuration 3700 SERVER= .include DIR/aux-var/tls_conf_prefix primary_hostname = myhost.test.ex log_selector = +received_recipients +outgoing_port # ----- Main settings ----- acl_smtp_auth = log_call acl_smtp_mail = check_authd acl_smtp_rcpt = check_authd acl_smtp_data = ar_header queue_only queue_run_in_order trusted_users = CALLER tls_on_connect_ports = PORT_S tls_advertise_hosts = * tls_certificate = DIR/aux-fixed/cert1 tls_verify_hosts = * tls_verify_certificates = DIR/aux-fixed/cert2 # ----- ACL ----- begin acl log_call: accept logwrite = Auth ACL called, after smtp cmd "$smtp_command" check_authd: deny message = authentication required !authenticated = * accept ar_header: accept add_header = :at_start:${authresults {$primary_hostname}} # ----- Authentication ----- begin authenticators tls: driver = tls server_debug_print = +++TLS \$auth1="$auth1" server_param1 = ${quote:${certextract {subject,CN,>:} \ {$tls_in_peercert}}} server_condition = ${if def:auth1} server_set_id = $auth1 # ----- Routers ----- begin routers server_r: driver = accept condition = ${if eq {server}{SERVER}} transport = file client_r1: driver = accept transport = ${if eq {$local_part}{smtps} {t2}{t1}} # ----- Transports ----- begin transports t1: driver = smtp hosts = 127.0.0.1 port = PORT_D hosts_try_fastopen = : allow_localhost tls_certificate = DIR/aux-fixed/cert2 tls_verify_certificates = DIR/aux-fixed/cert1 tls_verify_cert_hostnames = : t2: driver = smtp hosts = 127.0.0.1 port = PORT_S hosts_try_fastopen = : protocol = smtps allow_localhost tls_certificate = DIR/aux-fixed/cert2 tls_verify_certificates = DIR/aux-fixed/cert1 tls_verify_cert_hostnames = : file: driver = appendfile file = DIR/test-mail/${bless:$local_part} user = CALLER # End