Tetsuite: feature-check multileaf OCSP testcases
[users/jgh/exim.git] / test / confs / 5840
1 # Exim test configuration 5840
2 # DANE/OpenSSL
3
4 SERVER=
5 CONTROL= *
6
7 .include DIR/aux-var/tls_conf_prefix
8
9 primary_hostname = myhost.test.ex
10
11 # ----- Main settings -----
12
13 .ifndef OPT
14 acl_smtp_rcpt = accept logwrite = "rcpt ACL"
15 .else
16 acl_smtp_rcpt = accept verify = recipient/callout
17 .endif
18
19 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
20
21 queue_run_in_order
22
23 tls_advertise_hosts = *
24
25 # Set certificate only if server
26 CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net
27 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
28
29 .ifdef CERT
30 tls_certificate = CERT
31 .else
32 tls_certificate = ${if eq {SERVER}{server} \
33         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
34                 {CDIR2/fullchain.pem}\
35                 {CDIR1/fullchain.pem}}}\
36         fail}
37 .endif
38
39 .ifdef ALLOW
40 tls_privatekey = ALLOW
41 .else
42 tls_privatekey = ${if eq {SERVER}{server} \
43         {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \
44                 {CDIR2/server1.example.com.unlocked.key}\
45                 {CDIR1/server1.example.net.unlocked.key}}}\
46         fail}
47 .endif
48
49 # ----- Routers -----
50
51 begin routers
52
53 client:
54   driver = dnslookup
55   condition = ${if eq {SERVER}{}}
56   dnssec_request_domains = *
57   self = send
58   transport = send_to_server
59   errors_to = ""
60
61 server:
62   driver = redirect
63   data = :blackhole:
64
65
66 # ----- Transports -----
67
68 begin transports
69
70 send_to_server:
71   driver = smtp
72   allow_localhost
73   port = PORT_D
74
75   hosts_try_dane =     CONTROL
76   hosts_require_dane = HOSTIPV4
77   tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}
78   tls_try_verify_hosts = thishost.test.ex
79   tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}}
80
81
82
83 # ----- Retry -----
84
85
86 begin retry
87
88 * * F,5d,10s
89
90
91 # End