-# Exim test configuration 1162
+# Exim test configuration 2033
# TLS client: verify certificate from server - name-fails
SERVER=
tls_certificate = ${if eq {SERVER}{server}{CERT1}fail}
tls_privatekey = ${if eq {SERVER}{server}{KEY1}fail}
-tls_verify_hosts = *
-tls_verify_certificates = ${if eq {SERVER}{server}{CERT2}fail}
-
# ----- Routers -----
port = PORT_D
hosts_try_fastopen = :
hosts_require_tls = HOSTIPV4
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA2
port = PORT_D
hosts_try_fastopen = :
hosts_require_tls = HOSTIPV4
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = \
${if eq{$host_address}{127.0.0.1}{CA1}{CA2}}
port = PORT_D
hosts_try_fastopen = :
hosts_require_tls = HOSTIPV4
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA2
tls_try_verify_hosts = *
hosts = HOSTNAME
port = PORT_D
hosts_try_fastopen = :
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA2
tls_verify_hosts = *
hosts = HOSTNAME
port = PORT_D
hosts_try_fastopen = :
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
hosts = server1.example.com
port = PORT_D
hosts_try_fastopen = :
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *
hosts = HOSTNAME
port = PORT_D
hosts_try_fastopen = :
- tls_certificate = CERT2
- tls_privatekey = CERT2
tls_verify_certificates = CA1
tls_verify_cert_hostnames = *