Fix non-TLS build
[users/heiko/exim.git] / test / confs / 5840
1 # Exim test configuration 5840
2 # DANE/OpenSSL
3
4 SERVER=
5 CONTROL= *
6
7 .include DIR/aux-var/tls_conf_prefix
8
9 primary_hostname = myhost.test.ex
10
11 # ----- Main settings -----
12
13 .ifndef OPT
14 acl_smtp_rcpt = accept logwrite = "rcpt ACL"
15 .else
16 acl_smtp_rcpt = accept verify = recipient/callout
17 .endif
18
19 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified \
20                 +tls_sni
21
22 queue_run_in_order
23
24 tls_advertise_hosts = *
25
26 # Set certificate only if server
27 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
28 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
29
30 .ifdef CERT
31 tls_certificate = CERT
32 .else
33 tls_certificate = ${if eq {SERVER}{server} \
34         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
35                 {CDIR2/fullchain.pem}\
36                 {CDIR1/fullchain.pem}}}\
37         fail}
38 .endif
39
40 .ifdef ALLOW
41 tls_privatekey = ALLOW
42 .else
43 tls_privatekey = ${if eq {SERVER}{server} \
44         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
45                 {CDIR2/server1.example.com.unlocked.key}\
46                 {CDIR1/server1.example.net.unlocked.key}}}\
47         fail}
48 .endif
49
50 # ----- Routers -----
51
52 begin routers
53
54 client:
55   driver = dnslookup
56   condition = ${if eq {SERVER}{}}
57   dnssec_request_domains = *
58   self = send
59   transport = send_to_server
60   errors_to = ""
61
62 server:
63   driver = redirect
64   data = :blackhole:
65
66
67 # ----- Transports -----
68
69 begin transports
70
71 send_to_server:
72   driver = smtp
73   allow_localhost
74   port = PORT_D
75   hosts_try_fastopen =  :
76
77   hosts_try_dane =     CONTROL
78   hosts_require_dane = HOSTIPV4
79   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
80   tls_try_verify_hosts = thishost.test.ex
81   tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}}
82
83
84
85 # ----- Retry -----
86
87
88 begin retry
89
90 * * F,5d,10s
91
92
93 # End