1 # Exim test configuration 5600
2 # OCSP stapling, server
7 host_lookup_order = bydns
8 primary_hostname = server1.example.com
9 rfc1413_query_timeout = 0s
10 spool_directory = DIR/spool
11 log_file_path = DIR/spool/log/%slog
13 gecos_name = CALLER_NAME
15 # ----- Main settings -----
17 acl_smtp_connect = check_connect
18 acl_smtp_mail = check_mail
19 acl_smtp_rcpt = check_recipient
21 log_selector = +tls_peerdn
26 tls_advertise_hosts = *
28 tls_certificate = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem
29 tls_privatekey = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
31 tls_verify_hosts = HOSTIPV4
32 tls_try_verify_hosts = *
33 tls_verify_certificates = DIR/aux-fixed/cert2
43 accept logwrite = acl_conn: ocsp in status: $tls_in_ocsp \
44 (${listextract {${eval:$tls_in_ocsp+1}} \
45 {notreq:notresp:vfynotdone:failed:verified}})
48 accept logwrite = acl_mail: ocsp in status: $tls_in_ocsp \
49 (${listextract {${eval:$tls_in_ocsp+1}} \
50 {notreq:notresp:vfynotdone:failed:verified}})
53 deny message = certificate not verified: peerdn=$tls_peerdn
54 ! verify = certificate
65 transport = local_delivery
68 # ----- Transports -----
74 file = DIR/test-mail/$local_part
75 headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn