X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=test%2Fconfs%2F5600;h=018ee3a788b7936434547e26845b1e659c85f56d;hb=9aa512a1898155484e00ee089057d28f2432b30e;hp=8b26ee7fa7ad5a997e74a83c73917c620d1e326e;hpb=f5d786885721c374cc22a1f1311ca01408a496fd;p=exim.git diff --git a/test/confs/5600 b/test/confs/5600 index 8b26ee7fa..018ee3a78 100644 --- a/test/confs/5600 +++ b/test/confs/5600 @@ -14,6 +14,8 @@ gecos_name = CALLER_NAME # ----- Main settings ----- +acl_smtp_connect = check_connect +acl_smtp_mail = check_mail acl_smtp_rcpt = check_recipient log_selector = +tls_peerdn @@ -37,6 +39,16 @@ tls_ocsp_file = OCSP begin acl +check_connect: + accept logwrite = acl_conn: ocsp in status: $tls_in_ocsp \ + (${listextract {${eval:$tls_in_ocsp+1}} \ + {notreq:notresp:vfynotdone:failed:verified}}) + +check_mail: + accept logwrite = acl_mail: ocsp in status: $tls_in_ocsp \ + (${listextract {${eval:$tls_in_ocsp+1}} \ + {notreq:notresp:vfynotdone:failed:verified}}) + check_recipient: deny message = certificate not verified: peerdn=$tls_peerdn ! verify = certificate