DANE: Fix 2-rcpt message, diff domins case. Bug 2265
[users/heiko/exim.git] / test / confs / 5801
1 # Exim test configuration 5801
2 # DANE common
3
4 SERVER=
5 CONTROL= *
6
7 .include DIR/aux-var/tls_conf_prefix
8
9 primary_hostname = myhost.test.ex
10
11 # ----- Main settings -----
12
13 .ifndef OPT
14 acl_smtp_rcpt = accept
15 .else
16 acl_smtp_rcpt = accept verify = recipient/callout
17 .endif
18
19 log_selector =  +received_recipients +tls_certificate_verified +tls_sni
20
21 queue_run_in_order
22
23 tls_advertise_hosts = *
24 .ifdef _HAVE_GNUTLS
25 # needed to force generation
26 tls_dhparam = historic
27 .endif
28
29 # Set certificate only if server
30 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
31 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
32
33
34 tls_certificate = ${if eq {SERVER}{server} \
35         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
36                 {CDIR2/fullchain.pem}\
37                 {CDIR1/fullchain.pem}}}\
38         fail}
39
40 tls_privatekey = ${if eq {SERVER}{server} \
41         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
42                 {CDIR2/server1.example.com.unlocked.key}\
43                 {CDIR1/server1.example.net.unlocked.key}}}\
44         fail}
45
46 # ----- Routers -----
47
48 begin routers
49
50 client:
51   driver = dnslookup
52   condition = ${if eq {SERVER}{}}
53   dnssec_request_domains = *
54   self = send
55   transport = send_to_server
56   errors_to = ""
57
58 server:
59   driver = redirect
60   data = :blackhole:
61
62
63 # ----- Transports -----
64
65 begin transports
66
67 send_to_server:
68   driver = smtp
69   allow_localhost
70   port = PORT_D
71   hosts_try_fastopen =  :
72
73   hosts_try_dane =     CONTROL
74   hosts_require_dane = HOSTIPV4
75   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
76   tls_try_verify_hosts = thishost.test.ex
77   tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}}
78
79
80
81 # ----- Retry -----
82
83
84 begin retry
85
86 * * F,5d,10s
87
88
89 # End