1 # TLS server: mandatory, optional, and revoked certificates
3 munge gnutls_unexpected
4 exim -DSERVER=server -bd -oX PORT_D
6 # No certificate, certificate required
7 client-gnutls HOSTIPV4 PORT_D
19 # No certificate, certificate optional at TLS time, required by ACL
20 client-gnutls 127.0.0.1 PORT_D
33 mail from:<userx@test.ex>
35 rcpt to:<userx@test.ex>
40 # Good certificate, certificate required
41 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
52 mail from:<userx@test.ex>
54 rcpt to:<userx@test.ex>
59 # Good certificate, certificate optional at TLS time, checked by ACL
60 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert2 aux-fixed/cert2
71 mail from:<userx@test.ex>
73 rcpt to:<userx@test.ex>
78 # Bad certificate, certificate required
79 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert1 aux-fixed/cert1
91 # Bad certificate, certificate optional at TLS time, reject at ACL time
92 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
103 mail from:<userx@test.ex>
105 rcpt to:<userx@test.ex>
112 exim -DCRL=DIR/aux-fixed/crl.pem -DSERVER=server -bd -oX PORT_D
114 # Good but revoked certificate, certificate required
115 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
127 # Revoked certificate, certificate optional at TLS time, reject at ACL time
128 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
139 mail from:<userx@test.ex>
141 rcpt to:<userx@test.ex>