git.exim.org Git - users/heiko/exim.git/blob

1 # Exim test configuration 3720

3 SERVER=

5 .include DIR/aux-var/tls_conf_prefix

7 primary_hostname = myhost.test.ex

8 log_selector = +received_recipients +outgoing_port

10 # ----- Main settings -----

12 acl_smtp_auth = log_call

13 acl_smtp_mail = check_authd

14 acl_smtp_rcpt = check_authd

15 acl_smtp_data = ar_header

17 queue_only

18 queue_run_in_order

19 trusted_users = CALLER

21 tls_advertise_hosts = *

22 tls_certificate = DIR/aux-fixed/cert1

24 tls_verify_hosts = *

25 tls_verify_certificates = DIR/aux-fixed/cert2

28 # ----- ACL -----

30 begin acl

32 log_call:

33 accept logwrite = Auth ACL called, after smtp cmd "$smtp_command"

35 check_authd:

36 deny message = authentication required

37 !authenticated = *

38 accept

40 ar_header:

41 accept add_header = :at_start:${authresults {$primary_hostname}}

43 # ----- Authentication -----

45 begin authenticators

47 ext_ccert_cn:

48 driver = external

49 public_name = EXTERNAL

51 server_advertise_condition = ${if eq{$tls_in_cipher}{}{no}{yes}}

52 server_param2 = ${certextract {subject,CN} {$tls_in_peercert}}

53 server_condition = ${if eq {$auth2}{$auth1}}

54 server_set_id = $auth1

55 server_debug_print = +++TLS \$auth1="$auth1"

57 client_send = "Phil Pennock"

60 # ----- Routers -----

62 begin routers

64 server_r:

65 driver = accept

66 condition = ${if eq {server}{SERVER}}

67 transport = file

69 client_r1:

70 driver = accept

71 transport = t1

74 # ----- Transports -----

76 begin transports

78 t1:

79 driver = smtp

80 hosts = 127.0.0.1

81 port = PORT_D

82 hosts_try_fastopen = :

83 allow_localhost

84 tls_certificate = DIR/aux-fixed/cert2

85 tls_verify_certificates = DIR/aux-fixed/cert1

86 tls_verify_cert_hostnames = :

87 hosts_try_auth = *

89 file:

90 driver = appendfile

91 file = DIR/test-mail/${bless:$local_part}

92 user = CALLER

94 # End