git.exim.org Git - exim.git/blob

1 # Exim test configuration 3820

3 SERVER=

5 .ifdef TRUSTED

6 .include DIR/aux-var/tls_conf_prefix

7 .else

8 .include DIR/aux-var/std_conf_prefix

9 .endif

11 primary_hostname = myhost.test.ex

12 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}

14 # ----- Main settings -----

16 acl_smtp_rcpt = accept

17 queue_only

20 begin routers

22 client_r:

23 driver = accept

24 condition = ${if !eq {SERVER}{server}}

25 transport = smtp

26 errors_to =

28 begin transports

30 smtp:

31 driver = smtp

32 hosts = 127.0.0.1

33 allow_localhost

34 port = PORT_D

35 .ifdef TRUSTED

36 hosts_require_tls = *

37 tls_verify_certificates = DIR/aux-fixed/cert1

38 tls_verify_cert_hostnames = :

39 .else

40 hosts_avoid_tls = *

41 .endif

42 hosts_require_auth = *

44 # ----- Authentication -----

46 begin authenticators

48 .ifndef TRUSTED

49 sasl1:

50 driver = gsasl

51 public_name = ANONYMOUS

52 server_set_id = $auth1

53 server_condition = true

55 sasl2:

56 driver = gsasl

57 public_name = PLAIN

58 server_set_id = $auth1

59 server_condition = ${if eq {$auth3}{pencil}}

61 client_condition = ${if eq {plain}{$local_part}}

62 client_username = ph10

63 client_password = pencil

64 .endif

66 sasl3:

67 driver = gsasl

68 .ifdef TRUSTED

69 public_name = SCRAM-SHA-1-PLUS

70 server_advertise_condition = ${if def:tls_in_cipher}

71 server_channelbinding = true

72 .else

73 public_name = SCRAM-SHA-1

74 .endif

76 server_scram_salt = ${if eq {$auth1}{ph10} {QSXCR+Q6sek8bf92}}

77 .ifdef _HAVE_AUTH_GSASL_SCRAM_S_KEY

78 server_key = D+CSWLOshSulAsxiupA+qs2/fTE=

79 server_skey = 6dlGYMOdZcOPutkcNY8U2g7vK9Y=

80 .endif

81 server_password = ${if eq {$auth1}{ph10} {pencil}{unset_password}}

82 server_condition = true

83 server_set_id = $auth1

85 client_condition = ${if eq {scram_sha_1}{$local_part}}

86 client_username = ph10

87 client_password = pencil

88 .ifdef _HAVE_AUTH_GSASL_SCRAM_S_KEY

89 client_spassword = 1d96ee3a529b5a5f9e47c01f229a2cb8a6e15f7d

90 .endif

91 .ifdef TRUSTED

92 client_channelbinding = true

93 .endif

95 .ifdef _HAVE_AUTH_GSASL_SCRAM_SHA_256

96 sasl4:

97 driver = gsasl

98 .ifdef TRUSTED

99 public_name = SCRAM-SHA-256-PLUS

100 server_advertise_condition = ${if def:tls_in_cipher}

101 server_channelbinding = true

102 .else

103 public_name = SCRAM-SHA-256

104 .endif

105

106 server_scram_salt = QSXCR+Q6sek8bf92

107 server_password = pencil

108 server_condition = true

109 server_set_id = $auth1

110

111 client_condition = ${if eq {scram_sha_256}{$local_part}}

112 client_username = ph10

113 client_password = pencil

114 .ifdef TRUSTED

115 client_channelbinding = true

116 .endif

117 .endif

118

119

120 # End