tidying
[exim.git] / test / stderr / 5840
... / ...
CommitLineData
1### TLSA (3 1 1)
2### TLSA (3 1 2)
3### Recipient callout
4>>> host in hosts_connection_nolog? no (option unset)
5>>> host in host_lookup? no (option unset)
6>>> host in host_reject_connection? no (option unset)
7>>> host in sender_unqualified_hosts? no (option unset)
8>>> host in recipient_unqualified_hosts? no (option unset)
9>>> host in helo_verify_hosts? no (option unset)
10>>> host in helo_try_verify_hosts? no (option unset)
11>>> host in helo_accept_junk_hosts? no (option unset)
12>>> processing "accept"
13>>> check verify = recipient/callout
14>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
15>>> routing rcptuser@dane256ee.test.ex
16>>> calling client router
17>>> dane256ee.test.ex in "*"? yes (matched "*")
18>>> local host found for non-MX address
19>>> routed by client router
20>>> Attempting full verification using callout
21>>> callout cache: no domain record found for dane256ee.test.ex
22>>> callout cache: no address record found for rcptuser@dane256ee.test.ex
23>>> ip4.ip4.ip4.ip4 in hosts_require_dane? yes (matched "ip4.ip4.ip4.ip4")
24>>> interface=NULL port=1225
25>>> Connecting to dane256ee.test.ex [ip4.ip4.ip4.ip4]:1225 ... connected
26>>> SMTP<< 220 myhost.test.ex ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000
27>>> ip4.ip4.ip4.ip4 in hosts_avoid_esmtp? no (option unset)
28>>> SMTP>> EHLO myhost.test.ex
29>>> cmd buf flush 21 bytes
30>>> SMTP<< 250-myhost.test.ex Hello the.local.host.name [ip4.ip4.ip4.ip4]
31>>> 250-SIZE 52428800
32>>> 250-8BITMIME
33>>> 250-PIPELINING
34>>> 250-STARTTLS
35>>> 250 HELP
36>>> ip4.ip4.ip4.ip4 in hosts_avoid_tls? no (option unset)
37>>> ip4.ip4.ip4.ip4 in hosts_verify_avoid_tls? no (option unset)
38>>> SMTP>> STARTTLS
39>>> cmd buf flush 10 bytes
40>>> SMTP<< 220 TLS go ahead
41>>> ip4.ip4.ip4.ip4 in hosts_require_ocsp? no (option unset)
42>>> ip4.ip4.ip4.ip4 in hosts_require_ocsp? no (option unset)
43>>> ip4.ip4.ip4.ip4 in hosts_request_ocsp? no (end of list)
44>>> SMTP>> EHLO myhost.test.ex
45>>> cmd buf flush 21 bytes
46>>> SMTP<< 250-myhost.test.ex Hello the.local.host.name [ip4.ip4.ip4.ip4]
47>>> 250-SIZE 52428800
48>>> 250-8BITMIME
49>>> 250-PIPELINING
50>>> 250 HELP
51>>> ip4.ip4.ip4.ip4 in hosts_avoid_pipelining? no (option unset)
52>>> ip4.ip4.ip4.ip4 in hosts_require_auth? no (option unset)
53>>> SMTP>> MAIL FROM:<>
54>>> SMTP>> RCPT TO:<rcptuser@dane256ee.test.ex>
55>>> cmd buf flush 52 bytes
56>>> SMTP<< 250 OK
57>>> SMTP<< 250 Accepted
58>>> SMTP>> QUIT
59>>> cmd buf flush 6 bytes
60>>> SMTP<< 221 myhost.test.ex closing connection
61>>> SMTP(close)>>
62>>> wrote callout cache domain record for dane256ee.test.ex:
63>>> result=1 postmaster=0 random=0
64>>> wrote positive callout cache address record for rcptuser@dane256ee.test.ex
65>>> ----------- end verify ------------
66>>> accept: condition test succeeded in inline ACL
67>>> end of inline ACL: ACCEPT
68LOG: unexpected disconnection while reading SMTP command from [127.0.0.1] D=qqs
69### TLSA (2 0 1)
70### TLSA (2 1 1)
71### A server with a nonverifying cert and no TLSA
72### A server with a verifying cert and no TLSA
73### A server with two MXs for which both TLSA lookups return defer (delivery should defer)
74### A server lacking a TLSA, dane required (should fail)
75### A server lacking a TLSA, dane requested only (should deliver, non-DANE, as the NXDOMAIN is not DNSSEC)
76### A server where the A is dnssec and the TLSA lookup _fails_ (delivery should defer)
77### A server securely saying "no TLSA records here", dane required (delivery should fail)
78### A server securely saying "no TLSA records here", dane requested only (should deliver)
79### A server securely serving a wrong TLSA record, dane requested only (delivery should fail)
80### A server insecurely serving a good TLSA record, dane requested only (should deliver, non-DANE)
81### A server insecurely serving a good TLSA record, dane required (delivery should fail)
82### A server insecurely serving a good A record, dane requested only (should deliver, non-DANE)
83### A server insecurely serving a good A record, dane required (delivery should fail)
84### A server with a name not matching the cert. TA-mode; should fail
85### A server with a name not matching the cert. EE-mode; should deliver and claim DANE mode
86
87******** SERVER ********
88### TLSA (3 1 1)
89### TLSA (3 1 2)
90### Recipient callout
91### TLSA (2 0 1)
92### TLSA (2 1 1)
93### A server with a nonverifying cert and no TLSA
94### A server with a verifying cert and no TLSA
95### A server with two MXs for which both TLSA lookups return defer (delivery should defer)
96### A server lacking a TLSA, dane required (should fail)
97### A server lacking a TLSA, dane requested only (should deliver, non-DANE, as the NXDOMAIN is not DNSSEC)
98### A server where the A is dnssec and the TLSA lookup _fails_ (delivery should defer)
99### A server securely saying "no TLSA records here", dane required (delivery should fail)
100### A server securely saying "no TLSA records here", dane requested only (should deliver)
101### A server securely serving a wrong TLSA record, dane requested only (delivery should fail)
102### A server insecurely serving a good TLSA record, dane requested only (should deliver, non-DANE)
103### A server insecurely serving a good TLSA record, dane required (delivery should fail)
104### A server insecurely serving a good A record, dane requested only (should deliver, non-DANE)
105### A server insecurely serving a good A record, dane required (delivery should fail)
106### A server with a name not matching the cert. TA-mode; should fail
107### A server with a name not matching the cert. EE-mode; should deliver and claim DANE mode