Add caseless option to verify=not_blind. Bug 2356
[users/jgh/exim.git] / test / confs / 2025
1 # Exim test configuration 2025
2
3 SERVER=
4
5 .include DIR/aux-var/tls_conf_prefix
6
7 primary_hostname = myhost.test.ex
8
9 # ----- Main settings -----
10
11 acl_smtp_rcpt = accept
12
13 log_selector =  +tls_peerdn+tls_certificate_verified
14
15 queue_only
16 queue_run_in_order
17
18 tls_advertise_hosts = *
19
20 tls_require_ciphers = NORMAL:-VERS-ALL:+VERS-TLS1.2:-MAC-ALL:+SHA256
21
22 # Set certificate only if server
23
24 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
25 tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
26
27
28 # ----- Routers -----
29
30 begin routers
31
32 client:
33   driver = accept
34   condition = ${if eq {SERVER}{server}{no}{yes}}
35   retry_use_local_part
36   transport = send_to_server
37
38
39 # ----- Transports -----
40
41 begin transports
42
43 send_to_server:
44   driver = smtp
45   allow_localhost
46   hosts = HOSTIPV4 : 127.0.0.1
47   port = PORT_D
48   hosts_require_tls = HOSTIPV4
49   tls_require_ciphers = NORMAL:-VERS-ALL:+VERS-TLS1.2:-MAC-ALL:+SHA\
50          ${if eq{$host}{HOSTIPV4} {384} {256} }
51
52 # ----- Retry -----
53
54
55 begin retry
56
57 * * F,5d,10s
58
59
60 # End