diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2020-08-23 15:32:48 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2020-08-26 23:50:59 +0100 |
| commit | a505cf777f90755bce69ab53a899b284a304127b (patch) | |
| tree | 600d9d3c5f39ef72fcb4ab53998f8989eab62aee /test/confs/5801 | |
| parent | d8e99d6047e709b35eabb1395c2046100d1a1dda (diff) | |
| download | exim4-a505cf777f90755bce69ab53a899b284a304127b.tar.gz | |
DANE: Fix 2-rcpt message, diff domins case. Bug 2265
(cherry picked from commit 99350dede64ad634300ddf15d0d97a81fd75d330)
Diffstat (limited to 'test/confs/5801')
| -rw-r--r-- | test/confs/5801 | 89 |
1 files changed, 89 insertions, 0 deletions
diff --git a/test/confs/5801 b/test/confs/5801 new file mode 100644 index 000000000..f0f21e20b --- /dev/null +++ b/test/confs/5801 @@ -0,0 +1,89 @@ +# Exim test configuration 5801 +# DANE common + +SERVER= +CONTROL= * + +.include DIR/aux-var/tls_conf_prefix + +primary_hostname = myhost.test.ex + +# ----- Main settings ----- + +.ifndef OPT +acl_smtp_rcpt = accept +.else +acl_smtp_rcpt = accept verify = recipient/callout +.endif + +log_selector = +received_recipients +tls_certificate_verified +tls_sni + +queue_run_in_order + +tls_advertise_hosts = * +.ifdef _HAVE_GNUTLS +# needed to force generation +tls_dhparam = historic +.endif + +# Set certificate only if server +CDIR1 = DIR/aux-fixed/exim-ca/example.net/server1.example.net +CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com + + +tls_certificate = ${if eq {SERVER}{server} \ + {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \ + {CDIR2/fullchain.pem}\ + {CDIR1/fullchain.pem}}}\ + fail} + +tls_privatekey = ${if eq {SERVER}{server} \ + {${if or {{eq {DETAILS}{ta}} {eq {DETAILS}{ca}} {eq {DETAILS}{ee}}} \ + {CDIR2/server1.example.com.unlocked.key}\ + {CDIR1/server1.example.net.unlocked.key}}}\ + fail} + +# ----- Routers ----- + +begin routers + +client: + driver = dnslookup + condition = ${if eq {SERVER}{}} + dnssec_request_domains = * + self = send + transport = send_to_server + errors_to = "" + +server: + driver = redirect + data = :blackhole: + + +# ----- Transports ----- + +begin transports + +send_to_server: + driver = smtp + allow_localhost + port = PORT_D + hosts_try_fastopen = : + + hosts_try_dane = CONTROL + hosts_require_dane = HOSTIPV4 + tls_verify_cert_hostnames = ${if eq {OPT}{no_certname} {}{*}} + tls_try_verify_hosts = thishost.test.ex + tls_verify_certificates = ${if eq {DETAILS}{ca} {CDIR2/ca_chain.pem} {}} + + + +# ----- Retry ----- + + +begin retry + +* * F,5d,10s + + +# End |