acl_smtp_rcpt = check_recipient
log_selector = +received_recipients +tls_resumption +tls_peerdn
+.ifdef _OPT_OPENSSL_NO_TLSV1_3_X
openssl_options = +no_sslv2 +no_sslv3 +single_dh_use OPTION
+.else
+openssl_options = +no_sslv2 +no_sslv3 +single_dh_use
+.endif
tls_advertise_hosts = *
# Set certificate only if server
tls_verify_certificates = CDIR/CA/CA.pem
tls_verify_cert_hostnames = ${if match {$local_part}{^noverify} {*}{:}}
tls_try_verify_hosts = *
+.ifdef _HAVE_EVENT
event_action = ${acl {log_resumption}}
+.endif
send_to_server2:
driver = smtp
hosts_try_fastopen = :
tls_verify_certificates = CDIR/CA/CA.pem
tls_verify_cert_hostnames = :
+.ifdef _HAVE_EVENT
event_action = ${acl {log_resumption}}
+.endif
# ----- Retry -----