1 # Exim test configuration 5840
8 host_lookup_order = bydns
9 primary_hostname = myhost.test.ex
10 spool_directory = DIR/spool
11 log_file_path = DIR/spool/log/SERVER%slog
13 gecos_name = CALLER_NAME
15 # ----- Main settings -----
18 acl_smtp_rcpt = accept
20 acl_smtp_rcpt = accept verify = recipient/callout
23 log_selector = +received_recipients +tls_peerdn +tls_certificate_verified
27 tls_advertise_hosts = *
29 # Set certificate only if server
31 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
33 tls_certificate = ${if eq {SERVER}{server} \
34 {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}}} \
35 {CDIR2/fullchain.pem}\
39 tls_privatekey = ${if eq {SERVER}{server} \
40 {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}}} \
41 {CDIR2/server1.example.com.unlocked.key}\
51 condition = ${if eq {SERVER}{}}
52 dnssec_request_domains = *
54 transport = send_to_server
62 # ----- Transports -----
72 hosts_require_dane = !thishost.test.ex
73 tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
74 tls_try_verify_hosts = thishost.test.ex
75 tls_verify_certificates = CDIR2/ca_chain.pem