Make smtp transport try server cert verify by default
[exim.git] / test / confs / 2113
1 # Exim test configuration 2113
2
3 SERVER =
4
5 exim_path = EXIM_PATH
6 host_lookup_order = bydns
7 primary_hostname = myhost.test.ex
8 rfc1413_query_timeout = 0s
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
11 gecos_pattern = ""
12 gecos_name = CALLER_NAME
13
14 # ----- Main settings -----
15
16 acl_smtp_rcpt = accept
17
18 log_selector = +tls_peerdn+smtp_connection+incoming_port
19
20 queue_only
21 queue_run_in_order
22
23 smtp_accept_max_nonmail = 0
24
25 tls_advertise_hosts = *
26
27 # Set certificate only if server
28
29 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
30 tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
31
32
33 # ----- Routers -----
34
35 begin routers
36
37 client:
38 driver = accept
39 condition = ${if eq {SERVER}{server}{no}{yes}}
40 retry_use_local_part
41 transport = send_to_server
42
43 server:
44 driver = accept
45 retry_use_local_part
46 transport = local_delivery
47
48
49 # ----- Transports -----
50
51 begin transports
52
53 local_delivery:
54 driver = appendfile
55 file = DIR/test-mail/$local_part
56 headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn
57 user = CALLER
58
59 send_to_server:
60 driver = smtp
61 allow_localhost
62 hosts = 127.0.0.1
63 port = PORT_D
64 tls_try_verify_hosts = :
65
66 # End