From dc9c8f8b52cbf2e8424f5e98f63d29aa7fb81fe7 Mon Sep 17 00:00:00 2001
From: Jeremy Harris <jgh146exb@wizmail.org>
Date: Mon, 18 Dec 2017 15:38:54 +0000
Subject: Testsuite: move CRL testcases away from using SHA1-signed certs

---
 test/confs/2014 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'test/confs/2014')

diff --git a/test/confs/2014 b/test/confs/2014
index f9e2e6a22..a50a875cf 100644
--- a/test/confs/2014
+++ b/test/confs/2014
@@ -22,7 +22,7 @@ tls_privatekey = DIR/aux-fixed/cert1
 
 tls_verify_hosts = HOSTIPV4
 tls_try_verify_hosts = *
-tls_verify_certificates = DIR/aux-fixed/cert2
+tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem
 tls_crl = CRL
 
 
@@ -31,7 +31,7 @@ tls_crl = CRL
 begin acl
 
 check_recipient:
-  deny     message = certificate not verified: peerdn=$tls_peerdn
+  deny     message = certificate not verified: peerdn=$tls_in_peerdn
          ! verify = certificate
   accept
 
@@ -53,7 +53,7 @@ begin transports
 local_delivery:
   driver = appendfile
   file = DIR/test-mail/$local_part
-  headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn
+  headers_add = TLS: cipher=$tls_cipher peerdn=$tls_in_peerdn
   user = CALLER
 
 # End
-- 
cgit v1.2.3