1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu1.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 A TLS fatal alert has been received.
27 ### No certificate, certificate optional at TLS time, required by ACL
28 Connecting to 127.0.0.1 port 1225 ... connected
30 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
33 <<< 250-myhost.test.ex Hello rhu2.barb [127.0.0.1]
47 Attempting to start TLS
48 Succeeded in starting TLS
51 <<< 250 myhost.test.ex Hello rhu2tls.barb [127.0.0.1]
52 >>> mail from:<userx@test.ex>
55 >>> rcpt to:<userx@test.ex>
57 <<< 550 certificate not verified: peerdn=
60 <<< 221 myhost.test.ex closing connection
62 ### Good certificate, certificate required
63 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
64 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
65 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
67 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
70 <<< 250-myhost.test.ex Hello rhu3.barb [ip4.ip4.ip4.ip4]
84 Attempting to start TLS
85 Succeeded in starting TLS
86 >>> mail from:<userx@test.ex>
89 >>> rcpt to:<userx@test.ex>
94 <<< 221 myhost.test.ex closing connection
96 ### Good certificate, certificate optional at TLS time, checked by ACL
97 Connecting to 127.0.0.1 port 1225 ... connected
98 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
99 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
101 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
104 <<< 250-myhost.test.ex Hello rhu4.barb [127.0.0.1]
106 <<< 250-SIZE 52428800
118 Attempting to start TLS
119 Succeeded in starting TLS
120 >>> mail from:<userx@test.ex>
123 >>> rcpt to:<userx@test.ex>
128 <<< 221 myhost.test.ex closing connection
130 ### Bad certificate, certificate required
131 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
132 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
133 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
135 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
138 <<< 250-myhost.test.ex Hello rhu5.barb [ip4.ip4.ip4.ip4]
140 <<< 250-SIZE 52428800
152 Attempting to start TLS
153 A TLS fatal alert has been received.
158 ### Bad certificate, certificate optional at TLS time, reject at ACL time
159 Connecting to 127.0.0.1 port 1225 ... connected
160 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
161 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
163 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
166 <<< 250-myhost.test.ex Hello rhu6.barb [127.0.0.1]
168 <<< 250-SIZE 52428800
180 Attempting to start TLS
181 Succeeded in starting TLS
182 >>> mail from:<userx@test.ex>
185 >>> rcpt to:<userx@test.ex>
187 <<< 550 certificate not verified: peerdn=
190 <<< 221 myhost.test.ex closing connection
192 ### Otherwise good but revoked certificate, certificate required
193 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
194 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
195 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
197 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
200 <<< 250-myhost.test.ex Hello rhu7.barb [ip4.ip4.ip4.ip4]
202 <<< 250-SIZE 52428800
214 Attempting to start TLS
215 Succeeded in starting TLS
217 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
218 Connecting to 127.0.0.1 port 1225 ... connected
219 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
220 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
222 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
225 <<< 250-myhost.test.ex Hello rhu8.barb [127.0.0.1]
227 <<< 250-SIZE 52428800
239 Attempting to start TLS
240 Succeeded in starting TLS
241 >>> mail from:<userx@test.ex>
244 >>> rcpt to:<userx@test.ex>
246 <<< 550 certificate not verified: peerdn=CN=revoked1.example.com
249 <<< 221 myhost.test.ex closing connection
251 ### Good certificate, certificate required - but nonmatching CRL also present
252 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
253 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
254 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
256 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
259 <<< 250-myhost.test.ex Hello rhu9.barb [ip4.ip4.ip4.ip4]
261 <<< 250-SIZE 52428800
273 Attempting to start TLS
274 Succeeded in starting TLS
275 >>> mail from:<userx@test.ex>
278 >>> rcpt to:<userx@test.ex>
283 <<< 221 myhost.test.ex closing connection
286 ******** SERVER ********
287 ### No certificate, certificate required
288 ### No certificate, certificate optional at TLS time, required by ACL
289 ### Good certificate, certificate required
290 ### Good certificate, certificate optional at TLS time, checked by ACL
291 ### Bad certificate, certificate required
292 ### Bad certificate, certificate optional at TLS time, reject at ACL time
293 ### Otherwise good but revoked certificate, certificate required
294 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
295 ### Good certificate, certificate required - but nonmatching CRL also present