Testsuite: add DANE testcase for TLSA lookup SERVFAIL

[exim.git] / test / scripts / 2100-OpenSSL / 2112

diff --git a/test/scripts/2100-OpenSSL/2112 b/test/scripts/2100-OpenSSL/2112
index 1a39b4ecf4a9335960f841b214678d6b28512c32..b07b1c0ba1adc8987345710b5c9312dc663dfe24 100644 (file)
--- a/test/scripts/2100-OpenSSL/2112
+++ b/test/scripts/2100-OpenSSL/2112
@@ -1,9 +1,50 @@
 # TLS client: verify certificate from server - fails
 # TLS client: verify certificate from server - fails

-exim -DSERVER=server -d+all -bd -oX PORT_D
+exim -DSERVER=server -bd -oX PORT_D
+****
+#
+#
+exim -z 'this will fail to verify the cert at HOSTIPV4 so fail the crypt requirement'

 ****
 exim userx@test.ex
 Testing
 ****
 ****
 exim userx@test.ex
 Testing
 ****

+#
+#
+exim -z 'this will fail to verify the cert at HOSTIPV4 so fail the crypt, then retry on 127.1; ok'
+****
+exim usery@test.ex
+Testing
+****
+#
+#
+exim -z 'this will fail to verify the cert but continue unverified though crypted'
+****
+exim userz@test.ex
+Testing
+****
+#
+#
+exim -z 'this will fail to verify the cert at HOSTIPV4 and fallback to unencrypted'
+****
+exim userq@test.ex
+Testing
+****
+#
+#
+exim -z 'this will fail to verify the cert name and fallback to unencrypted'
+****
+exim userr@test.ex
+Testing
+****
+#
+#
+exim -z 'this will pass the cert verify including name check'
+****
+exim users@test.ex
+Testing
+****
+#
+#

 exim -qf
 ****
 killdaemon
 exim -qf
 ****
 killdaemon