Move certificate name checking to mainline, default enabled

[exim.git] / test / scripts / 5450-certnames-OpenSSL / 5450

diff --git a/test/scripts/5450-certnames-OpenSSL/5450 b/test/scripts/5450-certnames-OpenSSL/5450
index c94d1a5b2e9620e0aa09634c478af0bb9e71fd95..3b2221c9c967c706c1a6882551f8de68dbbbcf62 100644 (file)
--- a/test/scripts/5450-certnames-OpenSSL/5450
+++ b/test/scripts/5450-certnames-OpenSSL/5450
@@ -1,15 +1,22 @@
-# TLS client: verify certificate from server - fails
+# TLS client: verify certificate from server - name-fails

 exim -DSERVER=server -bd -oX PORT_D
 ****
 exim -DSERVER=server -bd -oX PORT_D
 ****

+# this will fail to verify the cert at HOSTIPV4 and fallback to unencrypted

 exim userq@test.ex
 Testing
 ****
 exim userq@test.ex
 Testing
 ****

+# this will fail to verify the cert name and fallback to unencrypted

 exim userr@test.ex
 Testing
 ****
 exim userr@test.ex
 Testing
 ****

+# this will pass the cert verify including name check

 exim users@test.ex
 Testing
 ****
 exim users@test.ex
 Testing
 ****

+# this will fail to verify the cert name but carry on (try-verify mode)
+exim usert@test.ex
+Testing
+****

 exim -qf
 ****
 killdaemon
 exim -qf
 ****
 killdaemon