1 ### No certificate, certificate required
2 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
4 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
7 <<< 250-myhost.test.ex Hello rhu1.barb [ip4.ip4.ip4.ip4]
21 Attempting to start TLS
22 A TLS fatal alert has been received.
25 ### No certificate, certificate optional at TLS time, required by ACL
26 Connecting to 127.0.0.1 port 1225 ... connected
28 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
31 <<< 250-myhost.test.ex Hello rhu2.barb [127.0.0.1]
45 Attempting to start TLS
46 Succeeded in starting TLS
49 <<< 250 myhost.test.ex Hello rhu2tls.barb [127.0.0.1]
50 >>> mail from:<userx@test.ex>
53 >>> rcpt to:<userx@test.ex>
55 <<< 550 certificate not verified: peerdn=
58 <<< 221 myhost.test.ex closing connection
60 ### Good certificate, certificate required
61 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
62 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
63 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
65 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
68 <<< 250-myhost.test.ex Hello rhu3.barb [ip4.ip4.ip4.ip4]
82 Attempting to start TLS
83 Succeeded in starting TLS
84 >>> mail from:<userx@test.ex>
87 >>> rcpt to:<userx@test.ex>
92 <<< 221 myhost.test.ex closing connection
94 ### Good certificate, certificate optional at TLS time, checked by ACL
95 Connecting to 127.0.0.1 port 1225 ... connected
96 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
97 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
99 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
102 <<< 250-myhost.test.ex Hello rhu4.barb [127.0.0.1]
104 <<< 250-SIZE 52428800
116 Attempting to start TLS
117 Succeeded in starting TLS
118 >>> mail from:<userx@test.ex>
121 >>> rcpt to:<userx@test.ex>
126 <<< 221 myhost.test.ex closing connection
128 ### Bad certificate, certificate required
129 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
130 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
131 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
133 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
136 <<< 250-myhost.test.ex Hello rhu5.barb [ip4.ip4.ip4.ip4]
138 <<< 250-SIZE 52428800
150 Attempting to start TLS
151 A TLS fatal alert has been received.
154 ### Bad certificate, certificate optional at TLS time, reject at ACL time
155 Connecting to 127.0.0.1 port 1225 ... connected
156 Certificate file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem
157 Key file = aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key
159 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
162 <<< 250-myhost.test.ex Hello rhu6.barb [127.0.0.1]
164 <<< 250-SIZE 52428800
176 Attempting to start TLS
177 Succeeded in starting TLS
178 >>> mail from:<userx@test.ex>
181 >>> rcpt to:<userx@test.ex>
183 <<< 550 certificate not verified: peerdn=
186 <<< 221 myhost.test.ex closing connection
188 ### Otherwise good but revoked certificate, certificate required
189 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
190 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
191 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
193 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
196 <<< 250-myhost.test.ex Hello rhu7.barb [ip4.ip4.ip4.ip4]
198 <<< 250-SIZE 52428800
210 Attempting to start TLS
211 Succeeded in starting TLS
213 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
214 Connecting to 127.0.0.1 port 1225 ... connected
215 Certificate file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem
216 Key file = aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key
218 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
221 <<< 250-myhost.test.ex Hello rhu8.barb [127.0.0.1]
223 <<< 250-SIZE 52428800
235 Attempting to start TLS
236 Succeeded in starting TLS
237 >>> mail from:<userx@test.ex>
240 >>> rcpt to:<userx@test.ex>
242 <<< 550 certificate not verified: peerdn=CN=revoked1.example.com
245 <<< 221 myhost.test.ex closing connection
247 ### Good certificate, certificate required - but nonmatching CRL also present
248 Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected
249 Certificate file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem
250 Key file = aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key
252 <<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
255 <<< 250-myhost.test.ex Hello rhu.barb [ip4.ip4.ip4.ip4]
257 <<< 250-SIZE 52428800
269 Attempting to start TLS
270 Succeeded in starting TLS
271 >>> mail from:<userx@test.ex>
274 >>> rcpt to:<userx@test.ex>
279 <<< 221 myhost.test.ex closing connection
282 ******** SERVER ********
283 ### No certificate, certificate required
284 ### No certificate, certificate optional at TLS time, required by ACL
285 ### Good certificate, certificate required
286 ### Good certificate, certificate optional at TLS time, checked by ACL
287 ### Bad certificate, certificate required
288 ### Bad certificate, certificate optional at TLS time, reject at ACL time
289 ### Otherwise good but revoked certificate, certificate required
290 ### Revoked certificate, certificate optional at TLS time, reject at ACL time
291 ### Good certificate, certificate required - but nonmatching CRL also present