TLS: use RFC 6125 rules for certifucate name checks when CNAMES are present. Bug...

[users/jgh/exim.git] / test / confs / 2024

diff --git a/test/confs/2024 b/test/confs/2024
index 64502d56b75006eb838ea554e1edcea2c44707cf..ea3b2820653801fcbf2578074626b3cadcca9868 100644 (file)
--- a/test/confs/2024
+++ b/test/confs/2024
@@ -22,4 +22,6 @@ tls_verify_hosts = HOSTIPV4
 #tls_verify_certificates = TVC
 tls_verify_certificates = CERT
 
 #tls_verify_certificates = TVC
 tls_verify_certificates = CERT
 

+# so we can decode in wireshark
+tls_require_ciphers = NORMAL:-KX-ALL:+RSA

 # End
 # End