GnuTLS: fix for clients offering no TLS extensions

[exim.git] / test / confs / 2001

diff --git a/test/confs/2001 b/test/confs/2001
index 715da4bf6163d2181c2f0ac13c07cdd9d7a9f248..f8358cbd4b64912466dec2062b0010b1ed937ad6 100644 (file)
--- a/test/confs/2001
+++ b/test/confs/2001
@@ -23,9 +23,6 @@ tls_advertise_hosts = *
 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
 tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
 
 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
 tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
 

-tls_verify_hosts = *
-tls_verify_certificates = ${if eq {SERVER}{server}{DIR/aux-fixed/cert2}fail}
-

 
 # so we can decode in wireshark
 tls_require_ciphers = NORMAL:-KX-ALL:+RSA
 
 # so we can decode in wireshark
 tls_require_ciphers = NORMAL:-KX-ALL:+RSA


@@ -49,10 +46,9 @@ send_to_server:
   driver = smtp
   allow_localhost
   hosts = 127.0.0.1
   driver = smtp
   allow_localhost
   hosts = 127.0.0.1

+  hosts_try_fastopen = :

   OPTION
   port = PORT_D
   OPTION
   port = PORT_D

-  tls_certificate = DIR/aux-fixed/cert2
-  tls_privatekey = DIR/aux-fixed/cert2

   tls_verify_certificates = DIR/aux-fixed/cert2
   tls_try_verify_hosts =
 
   tls_verify_certificates = DIR/aux-fixed/cert2
   tls_try_verify_hosts =