[exim.git] / test / scripts / 2000-GnuTLS / 2002

# TLS server: general ops and certificate extractions
gnutls
exim -DSERVER=server -bd -oX PORT_D
****
client-gnutls 127.0.0.1 PORT_D
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
mail from:<CALLER@test.ex>
??? 250
rcpt to:<CALLER@test.ex>
??? 250
DATA
??? 3
This is a test encrypted message.
.
??? 250
quit
??? 221
****
client-gnutls 127.0.0.1 PORT_D
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
mail from:<"name with spaces"@test.ex>
??? 250
rcpt to:<CALLER@test.ex>
??? 250
DATA
??? 3
This is a test encrypted message.
.
??? 250
quit
??? 221
****
client-gnutls HOSTIPV4 PORT_D
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
****
client-gnutls HOSTIPV4 PORT_D DIR/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem DIR/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
mail from:<CALLER@test.ex>
??? 250
rcpt to:<CALLER@test.ex>
??? 250
DATA
??? 3
This is a test encrypted message from a verified host.
.
??? 250
quit
??? 221
****
#
#
# A client that only talks RSA.
#
# We have to specify the key-exchange as well as the authentication, otherwise,
# the GnuTLS server side being foolish - it picks an ECDSA cipher-suite and then can't use it :(
# Possibly fixed in 3.6.x ? 
client-gnutls -p NONE:+SIGN-RSA-SHA256:+VERS-TLS-ALL:+ECDHE-RSA:+DHE-RSA:+RSA:+CIPHER-ALL:+MAC-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509 127.0.0.1 PORT_D
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
mail from:<CALLER@test.ex>
??? 250
rcpt to:<CALLER@test.ex>
??? 250
DATA
??? 3
This is a test encrypted message.
It should be sent under the RSA server cert and with an RSA cipher.
.
??? 250
quit
??? 221
****
#
#
# Make ECDSA authentication preferred (normally RSA is, it seems).
client-gnutls -p NONE:+SIGN-ECDSA-SHA512:+VERS-TLS-ALL:+KX-ALL:+CIPHER-ALL:+MAC-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509 127.0.0.1 PORT_D
??? 220
ehlo rhu.barb
??? 250-
??? 250-
??? 250-
??? 250-
??? 250-
??? 250
starttls
??? 220
mail from:<CALLER@test.ex>
??? 250
rcpt to:<CALLER@test.ex>
??? 250
DATA
??? 3
This is a test encrypted message.
It should be sent under the EC server cert and with an ECDSA cipher.
.
??? 250
quit
??? 221
****
killdaemon
exim -qf
****
exim -bh 10.0.0.1
starttls
quit
****
Commit	Line	Data
9d1c15ef	1	# TLS server: general ops and certificate extractions
59371ea7 PH	2	gnutls
	3	exim -DSERVER=server -bd -oX PORT_D
	4	****
	5	client-gnutls 127.0.0.1 PORT_D
	6	??? 220
	7	ehlo rhu.barb
	8	??? 250-
	9	??? 250-
	10	??? 250-
	11	??? 250-
5b456975	12	??? 250-
59371ea7 PH	13	??? 250
	14	starttls
	15	??? 220
	16	mail from:<CALLER@test.ex>
	17	??? 250
	18	rcpt to:<CALLER@test.ex>
	19	??? 250
	20	DATA
	21	??? 3
	22	This is a test encrypted message.
	23	.
	24	??? 250
	25	quit
	26	??? 221
	27	****
fd98a5c6 JH	28	client-gnutls 127.0.0.1 PORT_D
	29	??? 220
	30	ehlo rhu.barb
	31	??? 250-
	32	??? 250-
	33	??? 250-
	34	??? 250-
	35	??? 250-
	36	??? 250
	37	starttls
	38	??? 220
	39	mail from:<"name with spaces"@test.ex>
	40	??? 250
	41	rcpt to:<CALLER@test.ex>
	42	??? 250
	43	DATA
	44	??? 3
	45	This is a test encrypted message.
	46	.
	47	??? 250
	48	quit
	49	??? 221
	50	****
59371ea7 PH	51	client-gnutls HOSTIPV4 PORT_D
	52	??? 220
	53	ehlo rhu.barb
	54	??? 250-
	55	??? 250-
	56	??? 250-
	57	??? 250-
5b456975	58	??? 250-
59371ea7 PH	59	??? 250
	60	starttls
	61	??? 220
	62	****
9d1c15ef	63	client-gnutls HOSTIPV4 PORT_D DIR/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem DIR/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key
59371ea7 PH	64	??? 220
	65	ehlo rhu.barb
	66	??? 250-
	67	??? 250-
	68	??? 250-
	69	??? 250-
5b456975	70	??? 250-
59371ea7 PH	71	??? 250
	72	starttls
	73	??? 220
	74	mail from:<CALLER@test.ex>
	75	??? 250
	76	rcpt to:<CALLER@test.ex>
	77	??? 250
	78	DATA
	79	??? 3
	80	This is a test encrypted message from a verified host.
	81	.
	82	??? 250
	83	quit
	84	??? 221
	85	****
ba86e143 JH	86	#
	87	#
	88	# A client that only talks RSA.
	89	#
	90	# We have to specify the key-exchange as well as the authentication, otherwise,
	91	# the GnuTLS server side being foolish - it picks an ECDSA cipher-suite and then can't use it :(
	92	# Possibly fixed in 3.6.x ?
	93	client-gnutls -p NONE:+SIGN-RSA-SHA256:+VERS-TLS-ALL:+ECDHE-RSA:+DHE-RSA:+RSA:+CIPHER-ALL:+MAC-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509 127.0.0.1 PORT_D
	94	??? 220
	95	ehlo rhu.barb
	96	??? 250-
	97	??? 250-
	98	??? 250-
	99	??? 250-
	100	??? 250-
	101	??? 250
	102	starttls
	103	??? 220
	104	mail from:<CALLER@test.ex>
	105	??? 250
	106	rcpt to:<CALLER@test.ex>
	107	??? 250
	108	DATA
	109	??? 3
	110	This is a test encrypted message.
	111	It should be sent under the RSA server cert and with an RSA cipher.
	112	.
	113	??? 250
	114	quit
	115	??? 221
	116	****
	117	#
	118	#
	119	# Make ECDSA authentication preferred (normally RSA is, it seems).
	120	client-gnutls -p NONE:+SIGN-ECDSA-SHA512:+VERS-TLS-ALL:+KX-ALL:+CIPHER-ALL:+MAC-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509 127.0.0.1 PORT_D
	121	??? 220
	122	ehlo rhu.barb
	123	??? 250-
	124	??? 250-
	125	??? 250-
	126	??? 250-
	127	??? 250-
	128	??? 250
	129	starttls
	130	??? 220
	131	mail from:<CALLER@test.ex>
	132	??? 250
	133	rcpt to:<CALLER@test.ex>
	134	??? 250
	135	DATA
	136	??? 3
	137	This is a test encrypted message.
	138	It should be sent under the EC server cert and with an ECDSA cipher.
	139	.
	140	??? 250
	141	quit
	142	??? 221
	143	****
59371ea7 PH	144	killdaemon
	145	exim -qf
	146	****
	147	exim -bh 10.0.0.1
	148	starttls
	149	quit
	150	****