test/confs/2031

   1 # Exim test configuration 2030
   2 # SNI
   3
   4 SERVER =
   5
   6 .include DIR/aux-var/tls_conf_prefix
   7
   8 primary_hostname = myhost.test.ex
   9
  10 # ----- Main settings -----
  11
  12 domainlist local_domains = test.ex : *.test.ex
  13
  14 acl_smtp_rcpt = acl_log_sni
  15 log_selector = +tls_peerdn +tls_sni +received_recipients
  16 remote_max_parallel = 1
  17
  18 tls_advertise_hosts = *
  19
  20 # Set certificate only if server
  21
  22 tls_certificate = ${if eq {SERVER}{server} \
  23         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
  24             {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
  25             {cert1} \
  26                         }\
  27         }fail}
  28
  29 tls_privatekey = ${if eq {SERVER}{server} \
  30         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
  31             {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
  32             {cert1} \
  33                         }\
  34         }fail}
  35
  36
  37 # ------ ACL ------
  38
  39 begin acl
  40
  41 acl_log_sni:
  42   accept
  43          logwrite = SNI <$tls_in_sni>
  44
  45 # ----- Routers -----
  46
  47 begin routers
  48
  49 client:
  50   driver = accept
  51   condition = ${if !eq {SERVER}{server}}
  52   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
  53
  54 server:
  55   driver = redirect
  56   data = :blackhole:
  57
  58
  59 # ----- Transports -----
  60
  61 begin transports
  62
  63 send_to_server1:
  64   driver = smtp
  65   allow_localhost
  66   hosts = HOSTIPV4
  67   port = PORT_D
  68   hosts_try_fastopen =  :
  69   tls_sni = fred
  70
  71 send_to_server2:
  72   driver = smtp
  73   allow_localhost
  74   hosts = HOSTIPV4
  75   port = PORT_D
  76   hosts_try_fastopen =  :
  77   tls_sni = bill
  78
  79
  80 # ----- Retry -----
  81
  82
  83 begin retry
  84
  85 * * F,5d,10s
  86
  87
  88 # End