test/confs/2131

   1 # Exim test configuration 2131
   2 # SNI
   3
   4 SERVER =
   5
   6 exim_path = EXIM_PATH
   7 host_lookup_order = bydns
   8 primary_hostname = myhost.test.ex
   9 spool_directory = DIR/spool
  10 log_file_path = DIR/spool/log/SERVER%slog
  11 gecos_pattern = ""
  12 gecos_name = CALLER_NAME
  13
  14
  15 # ----- Main settings -----
  16
  17 domainlist local_domains = test.ex : *.test.ex
  18
  19 acl_smtp_rcpt = acl_log_sni
  20 log_selector = +tls_peerdn +tls_sni +received_recipients
  21 remote_max_parallel = 1
  22
  23 tls_advertise_hosts = *
  24
  25 # Set certificate only if server
  26
  27 tls_certificate = ${if eq {SERVER}{server} \
  28         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
  29             {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
  30             {cert1} \
  31                         }\
  32         }fail}
  33
  34 tls_privatekey = ${if eq {SERVER}{server} \
  35         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
  36             {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
  37             {cert1} \
  38                         }\
  39         }fail}
  40
  41
  42 # ------ ACL ------
  43
  44 begin acl
  45
  46 acl_log_sni:
  47   accept
  48          logwrite = SNI <$tls_in_sni>
  49
  50 # ----- Routers -----
  51
  52 begin routers
  53
  54 client:
  55   driver = accept
  56   condition = ${if !eq {SERVER}{server}}
  57   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
  58
  59 server:
  60   driver = redirect
  61   data = :blackhole:
  62
  63
  64 # ----- Transports -----
  65
  66 begin transports
  67
  68 send_to_server1:
  69   driver = smtp
  70   allow_localhost
  71   hosts = HOSTIPV4
  72   port = PORT_D
  73   tls_sni = fred
  74   hosts_require_tls = *
  75   tls_try_verify_hosts = :
  76
  77 send_to_server2:
  78   driver = smtp
  79   allow_localhost
  80   hosts = HOSTIPV4
  81   port = PORT_D
  82   tls_sni = bill
  83   hosts_require_tls = *
  84   tls_try_verify_hosts = :
  85
  86
  87 # ----- Retry -----
  88
  89
  90 begin retry
  91
  92 * * F,5d,10s
  93
  94
  95 # End