Use TLS by default on callouts/cutthroughs
[users/jgh/exim.git] / test / confs / 2031
1 # Exim test configuration 2030
2 # SNI
3
4 SERVER =
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
11 gecos_pattern = ""
12 gecos_name = CALLER_NAME
13
14
15 # ----- Main settings -----
16
17 domainlist local_domains = test.ex : *.test.ex
18
19 acl_smtp_rcpt = acl_log_sni
20 log_selector = +tls_peerdn +tls_sni
21 remote_max_parallel = 1
22
23 tls_advertise_hosts = *
24
25 # Set certificate only if server
26
27 tls_certificate = ${if eq {SERVER}{server} \
28         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
29             {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
30             {cert1} \
31                         }\
32         }fail}
33
34 tls_privatekey = ${if eq {SERVER}{server} \
35         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
36             {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
37             {cert1} \
38                         }\
39         }fail}
40
41
42 # ------ ACL ------
43
44 begin acl
45
46 acl_log_sni:
47   accept
48          logwrite = SNI <$tls_in_sni>
49
50 # ----- Routers -----
51
52 begin routers
53
54 client:
55   driver = accept
56   condition = ${if !eq {SERVER}{server}}
57   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
58
59 server:
60   driver = redirect
61   data = :blackhole:
62
63
64 # ----- Transports -----
65
66 begin transports
67
68 send_to_server1:
69   driver = smtp
70   allow_localhost
71   hosts = HOSTIPV4
72   port = PORT_D
73   tls_sni = fred
74
75 send_to_server2:
76   driver = smtp
77   allow_localhost
78   hosts = HOSTIPV4
79   port = PORT_D
80   tls_sni = bill
81
82
83 # ----- Retry -----
84
85
86 begin retry
87
88 * * F,5d,10s
89
90
91 # End