tls_certificate = ${if eq {SERVER}{server}{CERT1}fail}
tls_privatekey = ${if eq {SERVER}{server}{KEY1}fail}
-tls_verify_hosts = *
-tls_verify_certificates = ${if eq {SERVER}{server}{CERT2}fail}
-
# ----- Routers -----
client_s:
driver = accept
- local_parts = users
+ local_parts = user_s
retry_use_local_part
transport = send_to_server_req_passname
driver = smtp
allow_localhost
hosts = HOSTIPV4
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = CA2
driver = smtp
allow_localhost
hosts = HOSTIPV4 : 127.0.0.1
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = \
${if eq{$host_address}{127.0.0.1}{CA1}{CA2}}
driver = smtp
allow_localhost
hosts = HOSTIPV4
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = CA2
tls_try_verify_hosts = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA2
tls_verify_hosts = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
allow_localhost
hosts = server1.example.com
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *