TLS: use RFC 6125 rules for certifucate name checks when CNAMES are present....

[exim.git] / test / confs / 2001

diff --git a/test/confs/2001 b/test/confs/2001
index 9ab4cc3844c244dfbea8eea03963d04db5150b62..d6525cae5e42f3d7535d4aaa96f47efccb26b06e 100644 (file)
--- a/test/confs/2001
+++ b/test/confs/2001
@@ -27,6 +27,9 @@ tls_verify_hosts = *
 tls_verify_certificates = ${if eq {SERVER}{server}{DIR/aux-fixed/cert2}fail}
 
 
 tls_verify_certificates = ${if eq {SERVER}{server}{DIR/aux-fixed/cert2}fail}
 
 

+# so we can decode in wireshark
+tls_require_ciphers = NORMAL:-KX-ALL:+RSA
+

 # ----- Routers -----
 
 begin routers
 # ----- Routers -----
 
 begin routers


@@ -46,6 +49,7 @@ send_to_server:
   driver = smtp
   allow_localhost
   hosts = 127.0.0.1
   driver = smtp
   allow_localhost
   hosts = 127.0.0.1

+  hosts_try_fastopen = :

   OPTION
   port = PORT_D
   tls_certificate = DIR/aux-fixed/cert2
   OPTION
   port = PORT_D
   tls_certificate = DIR/aux-fixed/cert2