1 # Exim test configuration 5860
6 .include DIR/aux-var/tls_conf_prefix
8 primary_hostname = myhost.test.ex
10 # ----- Main settings -----
12 acl_smtp_rcpt = accept
14 log_selector = +received_recipients +tls_peerdn +tls_certificate_verified
19 tls_advertise_hosts = *
21 # Set certificate only if server
23 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
25 tls_certificate = ${if eq {SERVER}{server} \
26 {${if eq {DETAILS}{ta} \
27 {CDIR2/fullchain.pem}\
31 tls_privatekey = ${if eq {SERVER}{server} \
32 {${if eq {DETAILS}{ta} \
33 {CDIR2/server1.example.com.unlocked.key}\
41 accept condition = ${if eq {tls} {${listextract{1}{$event_name}}}}
42 logwrite = $event_name depth = $event_data \
43 <${certextract {subject} {$tls_out_peercert}}>
46 accept condition = ${if eq {msg} {${listextract{1}{$event_name}}}}
47 logwrite = $event_name dane=$tls_out_dane
56 condition = ${if eq {SERVER}{}}
57 dnssec_request_domains = *
59 transport = send_to_server
66 # ----- Transports -----
76 hosts_require_dane = *
77 hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
78 {= {0}{$tls_out_tlsa_usage}} } \
81 event_action = ${acl {logger}}