test/scripts/2100-OpenSSL/2114

   1 # TLS server: mandatory, optional, and revoked certificates
   2 exim -DSERVER=server -bd -oX PORT_D
   3 ****
   4 # No certificate, certificate required
   5 client-ssl HOSTIPV4 PORT_D
   6 ??? 220
   7 ehlo rhu.barb
   8 ??? 250-
   9 ??? 250-
  10 ??? 250-
  11 ??? 250-
  12 ??? 250
  13 starttls
  14 ??? 220
  15 ****
  16 # No certificate, certificate optional at TLS time, required by ACL
  17 client-ssl 127.0.0.1 PORT_D
  18 ??? 220
  19 ehlo rhu.barb
  20 ??? 250-
  21 ??? 250-
  22 ??? 250-
  23 ??? 250-
  24 ??? 250
  25 starttls
  26 ??? 220
  27 helo rhu.barb
  28 ??? 250
  29 mail from:<userx@test.ex>
  30 ??? 250
  31 rcpt to:<userx@test.ex>
  32 ??? 550
  33 quit
  34 ??? 221
  35 ****
  36 # Good certificate, certificate required
  37 client-ssl HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
  38 ??? 220
  39 ehlo rhu.barb
  40 ??? 250-
  41 ??? 250-
  42 ??? 250-
  43 ??? 250-
  44 ??? 250
  45 starttls
  46 ??? 220
  47 mail from:<userx@test.ex>
  48 ??? 250
  49 rcpt to:<userx@test.ex>
  50 ??? 250
  51 quit
  52 ??? 221
  53 ****
  54 # Good certificate, certificate optional at TLS time, checked by ACL
  55 client-ssl 127.0.0.1 PORT_D aux-fixed/cert2 aux-fixed/cert2
  56 ??? 220
  57 ehlo rhu.barb
  58 ??? 250-
  59 ??? 250-
  60 ??? 250-
  61 ??? 250-
  62 ??? 250
  63 starttls
  64 ??? 220
  65 mail from:<userx@test.ex>
  66 ??? 250
  67 rcpt to:<userx@test.ex>
  68 ??? 250
  69 quit
  70 ??? 221
  71 ****
  72 # Bad certificate, certificate required
  73 client-ssl HOSTIPV4 PORT_D aux-fixed/cert1 aux-fixed/cert1
  74 ??? 220
  75 ehlo rhu.barb
  76 ??? 250-
  77 ??? 250-
  78 ??? 250-
  79 ??? 250-
  80 ??? 250
  81 starttls
  82 ??? 220
  83 ****
  84 # Bad certificate, certificate optional at TLS time, reject at ACL time
  85 client-ssl 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
  86 ??? 220
  87 ehlo rhu.barb
  88 ??? 250-
  89 ??? 250-
  90 ??? 250-
  91 ??? 250-
  92 ??? 250
  93 starttls
  94 ??? 220
  95 mail from:<userx@test.ex>
  96 ??? 250
  97 rcpt to:<userx@test.ex>
  98 ??? 550-
  99 ??? 550
 100 quit
 101 ??? 221
 102 ****
 103 killdaemon
 104 exim -DCRL=DIR/aux-fixed/crl.pem -DSERVER=server -bd -oX PORT_D
 105 ****
 106 # Good but revoked certificate, certificate required
 107 client-ssl HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
 108 ??? 220
 109 ehlo rhu.barb
 110 ??? 250-
 111 ??? 250-
 112 ??? 250-
 113 ??? 250-
 114 ??? 250
 115 starttls
 116 ??? 220
 117 ****
 118 # Revoked certificate, certificate optional at TLS time, reject at ACL time
 119 client-ssl 127.0.0.1 PORT_D aux-fixed/cert1 aux-fixed/cert1
 120 ??? 220
 121 ehlo rhu.barb
 122 ??? 250-
 123 ??? 250-
 124 ??? 250-
 125 ??? 250-
 126 ??? 250
 127 starttls
 128 ??? 220
 129 mail from:<userx@test.ex>
 130 ??? 250
 131 rcpt to:<userx@test.ex>
 132 ??? 550-
 133 ??? 550
 134 quit
 135 ??? 221
 136 ****
 137 killdaemon