Testsuite: explicitly disable TFO in transports
[exim.git] / test / confs / 2111
CommitLineData
afda344b
PH
1# Exim test configuration 2111
2
3SERVER =
4
d4dc049f
JH
5.include DIR/aux-var/tls_conf_prefix
6
afda344b 7primary_hostname = myhost.test.ex
afda344b
PH
8
9# ----- Main settings -----
10
11acl_smtp_rcpt = accept
12log_selector = +tls_peerdn
13queue_only
14queue_run_in_order
15
16tls_advertise_hosts = *
17
18# Set certificate only if server
19
20tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
21tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
22
23tls_verify_hosts = *
24tls_verify_certificates = ${if eq {SERVER}{server}{DIR/aux-fixed/cert2}fail}
25
9e9ad3ee
JH
26.ifdef _OPT_OPENSSL_NO_TLSV1_3_X
27openssl_options = +no_tlsv1_3
28.endif
afda344b
PH
29
30# ----- Routers -----
31
32begin routers
33
34client:
35 driver = accept
36 condition = ${if eq {SERVER}{server}{no}{yes}}
37 retry_use_local_part
38 transport = send_to_server
39
40
41# ----- Transports -----
42
43begin transports
44
45send_to_server:
46 driver = smtp
47 allow_localhost
48 hosts = HOSTIPV4 : 127.0.0.1
afda344b 49 port = PORT_D
277b9979
JH
50 hosts_try_fastopen = :
51 hosts_require_tls = HOSTIPV4
afda344b
PH
52 tls_certificate = DIR/aux-fixed/cert2
53 tls_privatekey = DIR/aux-fixed/cert2
9e9ad3ee 54 tls_require_ciphers = IDEA-CBC-MD5:\
64e653f4 55 ${if eq{$host_address}{127.0.0.1}{:AES256-SHA:RSA_ARCFOUR_SHA}}
afda344b
PH
56
57# End