tls_verify_certificates = ${if eq {SERVER}{server}{DIR/aux-fixed/cert2}fail}
+# so we can decode in wireshark
+tls_require_ciphers = NORMAL:-KX-ALL:+RSA
+
# ----- Routers -----
begin routers
driver = smtp
allow_localhost
hosts = 127.0.0.1
+ hosts_try_fastopen = :
OPTION
port = PORT_D
tls_certificate = DIR/aux-fixed/cert2