# Check we get a non-CV but TLS connection, with try_dane but no require_dane
exim -DSERVER=server -DDETAILS=no -bd -oX PORT_D
****
# Check we get a non-CV but TLS connection, with try_dane but no require_dane
exim -DSERVER=server -DDETAILS=no -bd -oX PORT_D
****
# Check we get a CV and TLS connection, with try_dane but no require_dane
exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
****
# Check we get a CV and TLS connection, with try_dane but no require_dane
exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
****
exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
****
### A server with two MXs for which both TLSA lookups return defer (delivery should defer)
exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
****
### A server with two MXs for which both TLSA lookups return defer (delivery should defer)
Testing
****
### A server lacking a TLSA, dane requested only (should deliver, non-DANE, as the NXDOMAIN is not DNSSEC)
Testing
****
### A server lacking a TLSA, dane requested only (should deliver, non-DANE, as the NXDOMAIN is not DNSSEC)
Testing
****
#
### A server with a mixed-usage set of TLSAs - the EE-mode one failing verify (should deliver, DANE-mode)
# that way round to exercise more code in the implementation
Testing
****
#
### A server with a mixed-usage set of TLSAs - the EE-mode one failing verify (should deliver, DANE-mode)
# that way round to exercise more code in the implementation
### A server with a name not matching the cert. TA-mode; should fail
exim -DSERVER=server -DDETAILS=cert.net -bd -oX PORT_D
****
### A server with a name not matching the cert. TA-mode; should fail
exim -DSERVER=server -DDETAILS=cert.net -bd -oX PORT_D
****
exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
****
### A server securely serving a wrong TLSA record, dane not requested (delivery should work non-dane)
exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
****
### A server securely serving a wrong TLSA record, dane not requested (delivery should work non-dane)