test/scripts/2000-GnuTLS/2014

   1 # TLS server: mandatory, optional, and revoked certificates
   2 gnutls
   3 exim -DSERVER=server -bd -oX PORT_D
   4 ****
   5 # No certificate, certificate required
   6 client-gnutls HOSTIPV4 PORT_D
   7 ??? 220
   8 ehlo rhu.barb
   9 ??? 250-
  10 ??? 250-
  11 ??? 250-
  12 ??? 250-
  13 ??? 250
  14 starttls
  15 ??? 220
  16 ****
  17 # No certificate, certificate optional at TLS time, required by ACL
  18 client-gnutls 127.0.0.1 PORT_D
  19 ??? 220
  20 ehlo rhu.barb
  21 ??? 250-
  22 ??? 250-
  23 ??? 250-
  24 ??? 250-
  25 ??? 250
  26 starttls
  27 ??? 220
  28 helo rhu.barb
  29 ??? 250
  30 mail from:<userx@test.ex>
  31 ??? 250
  32 rcpt to:<userx@test.ex>
  33 ??? 550
  34 quit
  35 ??? 221
  36 ****
  37 # Good certificate, certificate required
  38 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
  39 ??? 220
  40 ehlo rhu.barb
  41 ??? 250-
  42 ??? 250-
  43 ??? 250-
  44 ??? 250-
  45 ??? 250
  46 starttls
  47 ??? 220
  48 mail from:<userx@test.ex>
  49 ??? 250
  50 rcpt to:<userx@test.ex>
  51 ??? 250
  52 quit
  53 ??? 221
  54 ****
  55 # Good certificate, certificate optional at TLS time, checked by ACL
  56 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert2 aux-fixed/cert2
  57 ??? 220
  58 ehlo rhu.barb
  59 ??? 250-
  60 ??? 250-
  61 ??? 250-
  62 ??? 250-
  63 ??? 250
  64 starttls
  65 ??? 220
  66 mail from:<userx@test.ex>
  67 ??? 250
  68 rcpt to:<userx@test.ex>
  69 ??? 250
  70 quit
  71 ??? 221
  72 ****
  73 # Bad certificate, certificate required
  74 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert1 aux-fixed/cert1
  75 ??? 220
  76 ehlo rhu.barb
  77 ??? 250-
  78 ??? 250-
  79 ??? 250-
  80 ??? 250-
  81 ??? 250
  82 starttls
  83 ??? 220
  84 ****
  85 # Bad certificate, certificate optional at TLS time, reject at ACL time
  86 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
  87 ??? 220
  88 ehlo rhu.barb
  89 ??? 250-
  90 ??? 250-
  91 ??? 250-
  92 ??? 250-
  93 ??? 250
  94 starttls
  95 ??? 220
  96 mail from:<userx@test.ex>
  97 ??? 250
  98 rcpt to:<userx@test.ex>
  99 ??? 550-
 100 ??? 550
 101 quit
 102 ??? 221
 103 ****
 104 killdaemon
 105 exim -DCRL=DIR/aux-fixed/crl.pem -DSERVER=server -bd -oX PORT_D
 106 ****
 107 # Good but revoked certificate, certificate required
 108 client-gnutls HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
 109 ??? 220
 110 ehlo rhu.barb
 111 ??? 250-
 112 ??? 250-
 113 ??? 250-
 114 ??? 250-
 115 ??? 250
 116 starttls
 117 ??? 220
 118 ****
 119 # Revoked certificate, certificate optional at TLS time, reject at ACL time
 120 client-gnutls 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
 121 ??? 220
 122 ehlo rhu.barb
 123 ??? 250-
 124 ??? 250-
 125 ??? 250-
 126 ??? 250-
 127 ??? 250
 128 starttls
 129 ??? 220
 130 mail from:<userx@test.ex>
 131 ??? 250
 132 rcpt to:<userx@test.ex>
 133 ??? 550-
 134 ??? 550
 135 quit
 136 ??? 221
 137 ****
 138 killdaemon