SERVER=
-exim_path = EXIM_PATH
-host_lookup_order = bydns
+.include DIR/aux-var/tls_conf_prefix
+
primary_hostname = myhost.test.ex
-spool_directory = DIR/spool
-log_file_path = DIR/spool/log/SERVER%slog
-gecos_pattern = ""
-gecos_name = CALLER_NAME
FX = DIR/aux-fixed
S1 = FX/exim-ca/example.com/server1.example.com
# ----- Main settings -----
+disable_ipv6 = true
+
acl_smtp_rcpt = accept
log_selector = +tls_peerdn+tls_certificate_verified
tls_certificate = ${if eq {SERVER}{server}{CERT1}fail}
tls_privatekey = ${if eq {SERVER}{server}{KEY1}fail}
-tls_verify_hosts = *
-tls_verify_certificates = ${if eq {SERVER}{server}{CERT2}fail}
-
# ----- Routers -----
client_s:
driver = accept
- local_parts = users
+ local_parts = user_s
retry_use_local_part
transport = send_to_server_req_passname
driver = smtp
allow_localhost
hosts = HOSTIPV4
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = CA2
driver = smtp
allow_localhost
hosts = HOSTIPV4 : 127.0.0.1
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = \
${if eq{$host_address}{127.0.0.1}{CA1}{CA2}}
driver = smtp
allow_localhost
hosts = HOSTIPV4
- hosts_require_tls = HOSTIPV4
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
+ hosts_require_tls = HOSTIPV4
tls_verify_certificates = CA2
tls_try_verify_hosts = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA2
tls_verify_hosts = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
allow_localhost
hosts = server1.example.com
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
allow_localhost
hosts = HOSTNAME
port = PORT_D
- tls_certificate = CERT2
- tls_privatekey = CERT2
+ hosts_try_fastopen = :
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *