TLS: variables $tls_(in,out)_tlsver
[exim.git] / test / confs / 4065
1 # test config 4065
2 # Early-pipe, AUTH, GnuTLS, tls-on-connect
3
4 keep_environment = PATH
5 exim_path = EXIM_PATH
6 host_lookup_order = bydns
7 spool_directory = DIR/spool
8
9 .ifdef SERVER
10 log_file_path = DIR/spool/log/SERVER%slog
11 .else
12 log_file_path = DIR/spool/log/%slog
13 .endif
14
15 gecos_pattern = ""
16 gecos_name = CALLER_NAME
17 dns_cname_loops = 9
18 chunking_advertise_hosts =
19 tls_on_connect_ports = PORT_D
20 tls_advertise_hosts = *
21 tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
22
23 # Avoid ECDHE key-exchange so that we can wireshark-decode
24 .ifdef _HAVE_GNUTLS
25 tls_require_ciphers = NORMAL:-KX-ALL:+RSA
26 .endif
27
28 .ifdef _HAVE_DMARC
29 dmarc_tld_file =
30 .endif
31
32 pipelining_connect_advertise_hosts = *
33 auth_advertise_hosts = *
34
35 log_selector = +received_recipients +pipelining
36 queue_only
37
38 acl_smtp_rcpt = accept
39
40 #
41 begin routers
42
43 server:
44 driver = redirect
45 condition = ${if eq {SERVER}{server}}
46 data = :blackhole:
47
48 client:
49 driver = manualroute
50 route_data = 127.0.0.1
51 self = send
52 transport = smtp
53
54 #
55 begin transports
56
57 smtp:
58 driver = smtp
59 hosts_pipe_connect = *
60 protocol = smtps
61 port = PORT_D
62 tls_verify_hosts =
63 tls_try_verify_hosts =
64 hosts_require_auth = *
65
66 #
67 begin authenticators
68
69 plain:
70 driver = plaintext
71 public_name = PLAIN
72
73 server_condition = "\
74 ${if and {{eq{$auth2}{userx}}{eq{$auth3}{secret}}}{yes}{no}}"
75 server_set_id = $auth2
76
77 client_send = ^userx^secret
78