[exim-dev] [Bug 1413] New: tls_verify_certificates = {forced…

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-dev
New-Topics: [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate., [exim-dev] [Bug 1413] tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate.
Subject: [exim-dev] [Bug 1413] New: tls_verify_certificates = {forced failure} but Exim still tries to verify the certificate.
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1413
           Summary: tls_verify_certificates = {forced failure} but Exim
                    still tries to verify the certificate.
           Product: Exim
           Version: 4.80
          Platform: Other
               URL: https://lists.exim.org/lurker/message/20131107.213612.8f
                    7efa7a.en.html
        OS/Version: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: String expansion
        AssignedTo: nigel@???
        ReportedBy: hs+exim@???
                CC: exim-dev@???



The tls_verify_certificates option should behave as unset in case of a forced
expansion failure. (According to the specs.)

But it seems that there is a clear difference between

begin transports
...

  foo:
     driver = smtp
     hosts_require_tls = foo.bar


     # forced failure
     tls_verify_certificates = ${if eq{a}{b} {yes}fail}
and
     # not setting this option
     # tls_verify_certificates =


--
Heiko


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email