git://git.exim.org
/
users
/
jgh
/
exim.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Change the default for hosts_try_dane, enabling use by default
[users/jgh/exim.git]
/
test
/
scripts
/
5840-DANE-OpenSSL
/
5840
diff --git
a/test/scripts/5840-DANE-OpenSSL/5840
b/test/scripts/5840-DANE-OpenSSL/5840
index 4d88131eac4eb0e593abf5ace1354e0e8cd5dce9..f988cd1cdfe9daf62976c50c677290ac3a0bdb9d 100644
(file)
--- a/
test/scripts/5840-DANE-OpenSSL/5840
+++ b/
test/scripts/5840-DANE-OpenSSL/5840
@@
-2,11
+2,11
@@
#
exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
****
#
exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
****
-### TLSA (3 1 1)
+### TLSA (3 1 1)
(DANE-EE SPKI SHA2-256)
exim -odq CALLER@dane256ee.test.ex
Testing
****
exim -odq CALLER@dane256ee.test.ex
Testing
****
-### TLSA (3 1 2)
+### TLSA (3 1 2)
( SHA2-512)
exim -odq CALLER@mxdane512ee.test.ex
Testing
****
exim -odq CALLER@mxdane512ee.test.ex
Testing
****
@@
-24,7
+24,7
@@
killdaemon
#
exim -DSERVER=server -DDETAILS=ta -bd -oX PORT_D
****
#
exim -DSERVER=server -DDETAILS=ta -bd -oX PORT_D
****
-### TLSA (2 0 1)
+### TLSA (2 0 1)
(DANE-TA CERT SHA2-256)
exim -odf CALLER@mxdane256ta.test.ex
Testing
****
exim -odf CALLER@mxdane256ta.test.ex
Testing
****
@@
-111,8
+111,9
@@
Testing
****
#
killdaemon
****
#
killdaemon
-
-
+#
+#
+#
### A server with a name not matching the cert. TA-mode; should fail
exim -DSERVER=server -DDETAILS=cert.net -bd -oX PORT_D
****
### A server with a name not matching the cert. TA-mode; should fail
exim -DSERVER=server -DDETAILS=cert.net -bd -oX PORT_D
****
@@
-124,6
+125,15
@@
Testing
exim -odf CALLER@danebroken8.example.com
Testing
****
exim -odf CALLER@danebroken8.example.com
Testing
****
+killdaemon
+#
#
#
+sudo rm DIR/spool/db/retry
+exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
+****
+### A server securely serving a wrong TLSA record, dane not requested (delivery should work non-dane)
+exim -odf -DCONTROL=: CALLER@danebroken2.test.ex
+****
killdaemon
killdaemon
+#
no_msglog_check
no_msglog_check