summaryrefslogtreecommitdiff
path: root/test/confs/2031
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2014-07-13 12:18:09 +0100
committerJeremy Harris <jgh146exb@wizmail.org>2014-07-13 12:18:09 +0100
commit0df4ab80579544db421576d92e8a9b783edb1a58 (patch)
tree6c57f00d40e63168369b1cbb87a74be827617647 /test/confs/2031
parent4b57b15d12942aff5360105a71f9c1b9d9a4edaf (diff)
Fix TLS SNI, and add regression test cases
Diffstat (limited to 'test/confs/2031')
-rw-r--r--test/confs/203192
1 files changed, 92 insertions, 0 deletions
diff --git a/test/confs/2031 b/test/confs/2031
new file mode 100644
index 000000000..a52b21eff
--- /dev/null
+++ b/test/confs/2031
@@ -0,0 +1,92 @@
+# Exim test configuration 2030
+# SNI
+
+SERVER =
+
+exim_path = EXIM_PATH
+host_lookup_order = bydns
+primary_hostname = myhost.test.ex
+rfc1413_query_timeout = 0s
+spool_directory = DIR/spool
+log_file_path = DIR/spool/log/SERVER%slog
+gecos_pattern = ""
+gecos_name = CALLER_NAME
+
+
+# ----- Main settings -----
+
+domainlist local_domains = test.ex : *.test.ex
+
+acl_smtp_rcpt = acl_log_sni
+log_selector = +tls_peerdn +tls_sni
+remote_max_parallel = 1
+
+tls_advertise_hosts = *
+
+# Set certificate only if server
+
+tls_certificate = ${if eq {SERVER}{server} \
+ {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
+ {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
+ {cert1} \
+ }\
+ }fail}
+
+tls_privatekey = ${if eq {SERVER}{server} \
+ {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
+ {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
+ {cert1} \
+ }\
+ }fail}
+
+
+# ------ ACL ------
+
+begin acl
+
+acl_log_sni:
+ accept
+ logwrite = SNI <$tls_in_sni>
+
+# ----- Routers -----
+
+begin routers
+
+client:
+ driver = accept
+ condition = ${if !eq {SERVER}{server}}
+ transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
+
+server:
+ driver = redirect
+ data = :blackhole:
+
+
+# ----- Transports -----
+
+begin transports
+
+send_to_server1:
+ driver = smtp
+ allow_localhost
+ hosts = HOSTIPV4
+ port = PORT_D
+ tls_sni = fred
+
+send_to_server2:
+ driver = smtp
+ allow_localhost
+ hosts = HOSTIPV4
+ port = PORT_D
+ tls_sni = bill
+
+
+# ----- Retry -----
+
+
+begin retry
+
+* * F,5d,10s
+
+
+# End