DANE - testcase for fail under GnuTLS with TA-mode to a selfsigned server cert
[exim.git] / test / confs / 5842
CommitLineData
624f33df
JH
1# Exim test configuration 5822
2# DANE/OpenSSL
3
4SERVER=
5
6.include DIR/aux-var/tls_conf_prefix
7
8primary_hostname = myhost.test.ex
9
10# ----- Main settings -----
11
12acl_smtp_rcpt = accept logwrite = "rcpt ACL"
13
14log_selector = +received_recipients +tls_peerdn +tls_certificate_verified
15
16queue_run_in_order
17
18tls_advertise_hosts = *
19
20tls_certificate = ${if eq {SERVER}{server} {DIR/aux-fixed/cert1} fail}
21
22# ----- Routers -----
23
24begin routers
25
26client:
27 driver = dnslookup
28 condition = ${if eq {SERVER}{}}
29 dnssec_request_domains = *
30 self = send
31 transport = send_to_server
32 errors_to = ""
33
34server:
35 driver = redirect
36 data = :blackhole:
37
38
39# ----- Transports -----
40
41begin transports
42
43send_to_server:
44 driver = smtp
45 allow_localhost
46 port = PORT_D
47
48 hosts_try_dane = *
49 hosts_require_dane = HOSTIPV4
50 tls_verify_cert_hostnames = :
51 tls_try_verify_hosts = thishost.test.ex
52# tls_verify_certificates = CDIR2/ca_chain.pem
53
54
55
56# ----- Retry -----
57
58
59begin retry
60
61* * F,5d,10s
62
63
64# End