X-Git-Url: https://git.exim.org/users/heiko/exim.git/blobdiff_plain/a08c49f10dbed682e0500e6510c78bd65002fc34..47bc7a521803eaea0d6666c327f2e21e22eb920b:/test/confs/2125?ds=inline diff --git a/test/confs/2125 b/test/confs/2125 index 20f8e1dfa..91b5283b2 100644 --- a/test/confs/2125 +++ b/test/confs/2125 @@ -2,13 +2,9 @@ SERVER= -exim_path = EXIM_PATH -host_lookup_order = bydns +.include DIR/aux-var/tls_conf_prefix + primary_hostname = myhost.test.ex -spool_directory = DIR/spool -log_file_path = DIR/spool/log/SERVER%slog -gecos_pattern = "" -gecos_name = CALLER_NAME # ----- Main settings ----- @@ -22,13 +18,12 @@ queue_run_in_order tls_advertise_hosts = * tls_require_ciphers = ${if eq{$sender_host_address}{HOSTIPV4}\ - {AES}{!AES:3DES}} - -# Set certificate only if server - -tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail} -tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail} + {AES256}{AES128}} +tls_certificate = DIR/aux-fixed/cert1 +.ifdef _OPT_OPENSSL_NO_TLSV1_3_X +openssl_options = +no_tlsv1_3 +.endif # ----- Routers ----- @@ -49,10 +44,12 @@ send_to_server: driver = smtp allow_localhost hosts = HOSTIPV4 : 127.0.0.1 - hosts_require_tls = HOSTIPV4 - tls_require_ciphers = DES-CBC3-SHA port = PORT_D - tls_try_verify_hosts = : + hosts_require_tls = HOSTIPV4 + tls_require_ciphers = AES128-SHA + hosts_try_fastopen = : + tls_verify_certificates = DIR/aux-fixed/cert1 + tls_verify_cert_hostnames = : # ----- Retry -----