Debug: output GnuTLS verbose reason for certificate verify refusal
[exim.git] / test / confs / 4500
CommitLineData
6a11a9e6
JH
1# Exim test configuration 4500
2
3SERVER=
4
d4dc049f
JH
5.include DIR/aux-var/std_conf_prefix
6
6a11a9e6 7primary_hostname = myhost.test.ex
6a11a9e6
JH
8
9# ----- Main settings -----
10
11acl_smtp_rcpt = accept
a79d8834 12acl_smtp_dkim = check_dkim
e34f8ca2 13acl_smtp_data = check_data
6a11a9e6 14
2c47372f
JH
15log_selector = +dkim_verbose
16
6a11a9e6
JH
17queue_only
18queue_run_in_order
19
a79d8834
JH
20
21begin acl
22
23check_dkim:
ce93c6d8
JH
24.ifdef BAD
25 warn logwrite = ${lookup dnsdb{defer_never,txt=_adsp._domainkey.$dkim_cur_signer}{$value}{unknown}}
26.endif
a79d8834
JH
27.ifdef OPTION
28 warn condition = ${if eq {$dkim_algo}{rsa-sha1}}
29 condition = ${if eq {$dkim_verify_status}{pass}}
30 logwrite = NOTE: forcing dkim verify fail (was pass)
31 set dkim_verify_status = fail
32 set dkim_verify_reason = hash too weak
33.endif
2c47372f 34 warn
a79d8834 35 logwrite = signer: $dkim_cur_signer bits: $dkim_key_length
2c47372f
JH
36.ifndef STRICT
37 accept
38.endif
a79d8834 39
e34f8ca2
JH
40check_data:
41 accept logwrite = ${authresults {$primary_hostname}}
42
6a11a9e6 43# End