Move the regression test for CVE-2019-15846 to 1100-Basic-TLS/1100
[users/jgh/exim.git] / test / confs / 4065
1 # test config 4065
2 # Early-pipe, AUTH, GnuTLS, tls-on-connect
3
4 keep_environment = PATH
5 exim_path = EXIM_PATH
6 host_lookup_order = bydns
7 spool_directory = DIR/spool
8
9 .ifdef SERVER
10 log_file_path = DIR/spool/log/SERVER%slog
11 .else
12 log_file_path = DIR/spool/log/%slog
13 .endif
14
15 gecos_pattern = ""
16 gecos_name = CALLER_NAME
17 dns_cname_loops = 9
18 chunking_advertise_hosts =
19 tls_on_connect_ports = PORT_D
20 tls_advertise_hosts = *
21 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
22
23 # Avoid ECDHE key-exchange so that we can wireshark-decode
24 .ifdef _HAVE_GNUTLS
25 tls_require_ciphers = NORMAL:-KX-ALL:+RSA
26 .endif
27
28 .ifdef _HAVE_DMARC
29 dmarc_tld_file =
30 .endif
31
32 pipelining_connect_advertise_hosts = *
33 auth_advertise_hosts = *
34
35 log_selector = +received_recipients +pipelining
36 queue_only
37
38 acl_smtp_rcpt = accept
39
40 #
41 begin routers
42
43 server:
44   driver =      redirect
45   condition =   ${if eq {SERVER}{server}}
46   data =        :blackhole:
47
48 client:
49   driver =      manualroute
50   route_data =  127.0.0.1
51   self =        send
52   transport =   smtp
53
54 #
55 begin transports
56
57 smtp:
58   driver =              smtp
59   hosts_pipe_connect =  *
60   protocol =            smtps
61   port =                PORT_D
62   tls_verify_hosts =
63   tls_try_verify_hosts =
64   hosts_require_auth =  *
65
66 #
67 begin authenticators
68
69 plain:
70   driver = plaintext
71   public_name = PLAIN
72
73   server_condition = "\
74     ${if and {{eq{$auth2}{userx}}{eq{$auth3}{secret}}}{yes}{no}}"
75   server_set_id = $auth2
76
77   client_send = ^userx^secret
78