# TLSv1.2 session resumption
#
### TLS1.2
exim -DSERVER=server -DOPTION=+no_tlsv1_3 -bd -oX PORT_D:PORT_D2
****
exim -DVALUE=resume -odf getticket@test.ex
Test message.
****
exim -DVALUE=resume -odf resume@test.ex hostnotresume@test.ex xyz@test.ex
Test message to two different hosts, one does not support resume
****
# allow time for ticket to hit renewal time
sleep 5
exim -DVALUE=resume -odf renewal@test.ex
Test message.
****
exim -DVALUE=resume -odf postrenewal@test.ex
Test message.
****
sleep 5
exim -DVALUE=resume -odf aftertimeout@test.ex
Test message.
****
exim -odf notreq@test.ex
Test message, not requesting resumption.
****
#
sudo rm -f DIR/spool/db/tls*
exim -odf -DVALUE=resume noverify_getticket@test.ex
Dest on this means the server cert will not verify (but try_verify will permit it)
****
exim -odf -DVALUE=resume noverify_resume@test.ex
Dest on this means the server cert will not verify (but try_verify will permit it)
****
#
# Test the host_name_extract transport option.  Due to the change the second
# message's connection should not offer a session.  The third should (on the 2nd),
# as should the fourth (on the 1st).
sudo rm -f DIR/spool/db/tls*
exim -DVALUE=resume -odf getticket@test.ex
****
exim -DVALUE=resume -DHELO_MSG=differenthost -odf noresume@test.ex
****
exim -DVALUE=resume -DHELO_MSG=differenthost -odf resume@test.ex
****
exim -DVALUE=resume -odf resume@test.ex
****
#
# Test TLS-on-connect
exim -DVALUE=resume -DSELECTOR=smtps -odf getticket@test.ex
****
exim -DVALUE=resume -DSELECTOR=smtps -odf resume@test.ex
****
#
# Check the -k (key only) option on dumpdb
perl
system 'DIR/eximdir/exim_dumpdb -k DIR/spool tls';
****
#
killdaemon
no_msglog_check