test/confs/5840

   1 # Exim test configuration 5840
   2 # DANE
   3
   4 SERVER=
   5
   6 .include DIR/aux-var/tls_conf_prefix
   7
   8 primary_hostname = myhost.test.ex
   9
  10 # ----- Main settings -----
  11
  12 .ifndef OPT
  13 acl_smtp_rcpt = accept
  14 .else
  15 acl_smtp_rcpt = accept verify = recipient/callout
  16 .endif
  17
  18 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
  19
  20 queue_run_in_order
  21
  22 tls_advertise_hosts = *
  23
  24 # Set certificate only if server
  25 CDIR1 = DIR/aux-fixed
  26 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
  27
  28 tls_certificate = ${if eq {SERVER}{server} \
  29         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}}} \
  30                 {CDIR2/fullchain.pem}\
  31                 {CDIR1/cert1}}}\
  32         fail}
  33
  34 tls_privatekey = ${if eq {SERVER}{server} \
  35         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}}} \
  36                 {CDIR2/server1.example.com.unlocked.key}\
  37                 {CDIR1/cert1}}}\
  38         fail}
  39
  40 # ----- Routers -----
  41
  42 begin routers
  43
  44 client:
  45   driver = dnslookup
  46   condition = ${if eq {SERVER}{}}
  47   dnssec_request_domains = *
  48   self = send
  49   transport = send_to_server
  50   errors_to = ""
  51
  52 server:
  53   driver = redirect
  54   data = :blackhole:
  55
  56
  57 # ----- Transports -----
  58
  59 begin transports
  60
  61 send_to_server:
  62   driver = smtp
  63   allow_localhost
  64   port = PORT_D
  65
  66   hosts_try_dane =     *
  67   hosts_require_dane = !thishost.test.ex
  68   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
  69   tls_try_verify_hosts = thishost.test.ex
  70   tls_verify_certificates = CDIR2/ca_chain.pem
  71
  72
  73
  74 # ----- Retry -----
  75
  76
  77 begin retry
  78
  79 * * F,5d,10s
  80
  81
  82 # End