DANE: do not trust a non-dnssec NXDOMAIN return for the TLSA lookup
[exim.git] / test / scripts / 5840-DANE-OpenSSL / 5840
CommitLineData
12ee8cf9
JH
1# DANE client: general
2#
82525c6f 3exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
12ee8cf9 4****
cfe93a95 5### TLSA (3 1 1)
281e72e4 6exim -odq CALLER@dane256ee.test.ex
101de477
JH
7Testing
8****
cfe93a95 9### TLSA (3 1 2)
281e72e4 10exim -odq CALLER@mxdane512ee.test.ex
12ee8cf9
JH
11Testing
12****
401a8935 13exim -qf
12ee8cf9 14****
bf7aabb4
JH
15#
16#
cfe93a95 17### Recipient callout
bf7aabb4
JH
18exim -DOPT=callout -bhc 127.0.0.1
19MAIL FROM: <CALLER@myhost.test.ex>
cfe93a95 20RCPT TO: <rcptuser@dane256ee.test.ex>
bf7aabb4 21****
12ee8cf9 22killdaemon
82525c6f
JH
23#
24#
25exim -DSERVER=server -DDETAILS=ta -bd -oX PORT_D
26****
cfe93a95 27### TLSA (2 0 1)
281e72e4 28exim -odq CALLER@mxdane256ta.test.ex
82525c6f
JH
29Testing
30****
31exim -qf
32****
33killdaemon
281e72e4 34#
cfe93a95 35### A server with a nonverifying cert and no TLSA
281e72e4
JH
36# Check we get a non-CV but TLS connection, with try_dane but no require_dane
37exim -DSERVER=server -DDETAILS=no -bd -oX PORT_D
38****
39exim -odq CALLER@thishost.test.ex
40Testing
12ee8cf9 41****
281e72e4
JH
42exim -qf
43****
44killdaemon
45#
cfe93a95 46### A server with a verifying cert and no TLSA
281e72e4
JH
47# Check we get a CV and TLS connection, with try_dane but no require_dane
48exim -DSERVER=server -DDETAILS=ca -bd -oX PORT_D
49****
50exim -odq CALLER@thishost.test.ex
51Testing
52****
01a4a5c5 53exim -DOPT=no_certname -qf
281e72e4
JH
54****
55killdaemon
56#
4cea764f 57#
4cea764f
JH
58exim -DSERVER=server -DDETAILS=ee -bd -oX PORT_D
59****
cfe93a95 60### A server with two MXs for which both TLSA lookups return defer
4cea764f
JH
61exim -odq CALLER@mxdanelazy.test.ex
62Testing
63****
cfe93a95 64### A server lacking a TLSA, required
6aa849d3
JH
65exim -odq CALLER@dane.no.1.test.ex
66Testing
67****
cfe93a95 68### A server lacking a TLSA, requested only
6aa849d3
JH
69exim -odq CALLER@dane.no.2.test.ex
70Testing
71****
4cea764f
JH
72exim -qf
73****
74killdaemon
75no_msglog_check