Move certificate name checking to mainline, default enabled

[users/jgh/exim.git] / test / confs / 5840

diff --git a/test/confs/5840 b/test/confs/5840
index 2c72b64c3fa7ff9ca6662697ac01a9ad95456888..5c0f6a51d69ccd30cf448f39496713ecff74c12d 100644 (file)
--- a/test/confs/5840
+++ b/test/confs/5840
@@ -68,6 +68,7 @@ send_to_server:
   hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
                                 {= {0}{$tls_out_tlsa_usage}} } \
                         {*}{}}
   hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
                                 {= {0}{$tls_out_tlsa_usage}} } \
                         {*}{}}

+  tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}}

   tls_try_verify_hosts = thishost.test.ex
   tls_verify_certificates = CDIR2/ca_chain.pem
 
   tls_try_verify_hosts = thishost.test.ex
   tls_verify_certificates = CDIR2/ca_chain.pem