test/confs/5840

   1 # Exim test configuration 5840
   2 # DANE/OpenSSL
   3
   4 SERVER=
   5 CONTROL= *
   6
   7 .include DIR/aux-var/tls_conf_prefix
   8
   9 primary_hostname = myhost.test.ex
  10
  11 # ----- Main settings -----
  12
  13 .ifndef OPT
  14 acl_smtp_rcpt = accept logwrite = "rcpt ACL"
  15 .else
  16 acl_smtp_rcpt = accept verify = recipient/callout
  17 .endif
  18
  19 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified \
  20                 +tls_sni
  21
  22 queue_run_in_order
  23
  24 tls_advertise_hosts = *
  25
  26 # Set certificate only if server
  27 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
  28 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
  29
  30 .ifdef CERT
  31 tls_certificate = CERT
  32 .else
  33 tls_certificate = ${if eq {SERVER}{server} \
  34         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
  35                 {CDIR2/fullchain.pem}\
  36                 {CDIR1/fullchain.pem}}}\
  37         fail}
  38 .endif
  39
  40 .ifdef ALLOW
  41 tls_privatekey = ALLOW
  42 .else
  43 tls_privatekey = ${if eq {SERVER}{server} \
  44         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
  45                 {CDIR2/server1.example.com.unlocked.key}\
  46                 {CDIR1/server1.example.net.unlocked.key}}}\
  47         fail}
  48 .endif
  49
  50 # ----- Routers -----
  51
  52 begin routers
  53
  54 client:
  55   driver = dnslookup
  56   condition = ${if eq {SERVER}{}}
  57   dnssec_request_domains = *
  58   self = send
  59   transport = send_to_server
  60   errors_to = ""
  61
  62 server:
  63   driver = redirect
  64   data = :blackhole:
  65
  66
  67 # ----- Transports -----
  68
  69 begin transports
  70
  71 send_to_server:
  72   driver = smtp
  73   allow_localhost
  74   port = PORT_D
  75   hosts_try_fastopen =  :
  76
  77   hosts_try_dane =     CONTROL
  78   hosts_require_dane = HOSTIPV4
  79   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
  80   tls_try_verify_hosts = thishost.test.ex
  81   tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}}
  82
  83
  84
  85 # ----- Retry -----
  86
  87
  88 begin retry
  89
  90 * * F,5d,10s
  91
  92
  93 # End