1 # Exim test configuration 5860
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
12 gecos_name = CALLER_NAME
14 # ----- Main settings -----
16 acl_smtp_rcpt = accept
18 log_selector = +received_recipients +tls_peerdn +tls_certificate_verified
23 tls_advertise_hosts = *
25 # Set certificate only if server
27 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
29 tls_certificate = ${if eq {SERVER}{server} \
30 {${if eq {DETAILS}{ta} \
31 {CDIR2/fullchain.pem}\
35 tls_privatekey = ${if eq {SERVER}{server} \
36 {${if eq {DETAILS}{ta} \
37 {CDIR2/server1.example.com.unlocked.key}\
45 accept condition = ${if eq {tls} {${listextract{1}{$event_name}}}}
46 logwrite = $event_name depth = $event_data \
47 <${certextract {subject} {$tls_out_peercert}}>
50 accept condition = ${if eq {msg} {${listextract{1}{$event_name}}}}
51 logwrite = $event_name dane=$tls_out_dane
60 condition = ${if eq {SERVER}{}}
61 dnssec_request_domains = *
63 transport = send_to_server
70 # ----- Transports -----
80 hosts_require_dane = *
81 hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
82 {= {0}{$tls_out_tlsa_usage}} } \
85 event_action = ${acl {logger}}