Testsuite: stabilize output sequence for case 0906
[exim.git] / test / confs / 5860
... / ...
CommitLineData
1# Exim test configuration 5860
2# DANE
3
4SERVER=
5
6.include DIR/aux-var/tls_conf_prefix
7
8primary_hostname = myhost.test.ex
9
10# ----- Main settings -----
11
12acl_smtp_rcpt = accept
13
14log_selector = +received_recipients +tls_peerdn +tls_certificate_verified
15
16queue_only
17queue_run_in_order
18
19tls_advertise_hosts = *
20
21# Set certificate only if server
22CDIR1 = DIR/aux-fixed
23CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
24
25tls_certificate = ${if eq {SERVER}{server} \
26 {${if eq {DETAILS}{ta} \
27 {CDIR2/fullchain.pem}\
28 {CDIR1/cert1}}}\
29 fail}
30
31tls_privatekey = ${if eq {SERVER}{server} \
32 {${if eq {DETAILS}{ta} \
33 {CDIR2/server1.example.com.unlocked.key}\
34 {CDIR1/cert1}}}\
35 fail}
36
37
38begin acl
39
40logger:
41 accept condition = ${if eq {tls} {${listextract{1}{$event_name}}}}
42 logwrite = $event_name depth = $event_data \
43 <${certextract {subject} {$tls_out_peercert}}>
44# message = noooo
45
46 accept condition = ${if eq {msg} {${listextract{1}{$event_name}}}}
47 logwrite = $event_name dane=$tls_out_dane
48 accept
49
50# ----- Routers -----
51
52begin routers
53
54client:
55 driver = dnslookup
56 condition = ${if eq {SERVER}{}}
57 dnssec_request_domains = *
58 self = send
59 transport = send_to_server
60
61server:
62 driver = redirect
63 data = :blackhole:
64
65
66# ----- Transports -----
67
68begin transports
69
70send_to_server:
71 driver = smtp
72 allow_localhost
73 port = PORT_D
74
75# hosts_try_dane = *
76 hosts_require_dane = *
77 hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
78 {= {0}{$tls_out_tlsa_usage}} } \
79 {*}{}}
80
81 event_action = ${acl {logger}}
82
83# End