Track tainted data and refuse to expand it
[users/jgh/exim.git] / test / confs / 5652
index 7dce363c24fadb598a3a2ea74a4c78a6489fd62a..5b29f5b689db77394b9e2a0d60cd27967ec3dd2b 100644 (file)
@@ -29,6 +29,7 @@ tls_ocsp_file =   DRSA/server1.example.com/server1.example.com.ocsp.good.resp \
              : DECDSA/server1.example_ec.com/server1.example_ec.com.ocsp.good.resp
 
 
+tls_require_ciphers = NORMAL:!VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.0
 
 # ------ ACL ------
 
@@ -72,6 +73,7 @@ remote_delivery:
   tls_require_ciphers =                OPT
   hosts_require_ocsp =         *
   tls_verify_certificates =    CERT
+  tls_verify_cert_hostnames =  :
 
 local_delivery:
   driver = appendfile