Disable identd (rfc1413) lookups by default
[users/jgh/exim.git] / test / confs / 5860
1 # Exim test configuration 5860
2 # DANE
3
4 SERVER=
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
11 gecos_pattern = ""
12 gecos_name = CALLER_NAME
13
14 # ----- Main settings -----
15
16 acl_smtp_rcpt = accept
17
18 log_selector =  +received_recipients +tls_peerdn +tls_certificate_verified
19
20 queue_only
21 queue_run_in_order
22
23 tls_advertise_hosts = *
24
25 # Set certificate only if server
26 CDIR1 = DIR/aux-fixed
27 CDIR2 = DIR/aux-fixed/exim-ca/example.com/server1.example.com
28
29 tls_certificate = ${if eq {SERVER}{server} \
30         {${if eq {DETAILS}{ta} \
31                 {CDIR2/fullchain.pem}\
32                 {CDIR1/cert1}}}\
33         fail}
34
35 tls_privatekey = ${if eq {SERVER}{server} \
36         {${if eq {DETAILS}{ta} \
37                 {CDIR2/server1.example.com.unlocked.key}\
38                 {CDIR1/cert1}}}\
39         fail}
40
41
42 begin acl
43
44 logger:
45   accept condition = ${if eq {tls} {${listextract{1}{$event_name}}}}
46          logwrite = $event_name depth = $event_data \
47                         <${certextract {subject} {$tls_out_peercert}}>
48 #  message = noooo
49
50   accept condition = ${if eq {msg} {${listextract{1}{$event_name}}}}
51          logwrite = $event_name dane=$tls_out_dane
52   accept
53
54 # ----- Routers -----
55
56 begin routers
57
58 client:
59   driver = dnslookup
60   condition = ${if eq {SERVER}{}}
61   dnssec_request_domains = *
62   self = send
63   transport = send_to_server
64
65 server:
66   driver = redirect
67   data = :blackhole:
68
69
70 # ----- Transports -----
71
72 begin transports
73
74 send_to_server:
75   driver = smtp
76   allow_localhost
77   port = PORT_D
78
79 #  hosts_try_dane = *
80   hosts_require_dane = *
81   hosts_request_ocsp = ${if or { {= {4}{$tls_out_tlsa_usage}} \
82                                  {= {0}{$tls_out_tlsa_usage}} } \
83                         {*}{}}
84
85   event_action =   ${acl {logger}}
86
87 # End