kumomta/crates/integration-tests/arc.lua

local kumo = require 'kumo'
package.path = '../../assets/?.lua;' .. package.path

local TEST_DIR = os.getenv 'KUMOD_TEST_DIR'
local SINK_PORT = tonumber(os.getenv 'KUMOD_SMTP_SINK_PORT')

kumo.on('init', function()
  kumo.configure_accounting_db_path(TEST_DIR .. '/accounting.db')

  local relay_hosts = { '0.0.0.0/0' }
  kumo.start_esmtp_listener {
    listen = '127.0.0.1:0',
    relay_hosts = relay_hosts,
  }

  kumo.start_http_listener {
    listen = '127.0.0.1:0',
  }

  kumo.configure_local_logs {
    log_dir = TEST_DIR .. '/logs',
    max_segment_duration = '1s',
  }

  kumo.define_spool {
    name = 'data',
    path = TEST_DIR .. '/data-spool',
  }

  kumo.define_spool {
    name = 'meta',
    path = TEST_DIR .. '/meta-spool',
  }
end)

kumo.on('smtp_server_data', function(msg, conn_meta)
  local arc = msg:arc_verify()
  kumo.log_info('ARC result', kumo.serde.json_encode_pretty(arc))
  if arc.result == 'fail' then
    kumo.reject(
      550,
      '5.7.29 ARC Validation failure: ' .. tostring(arc.reason)
    )
  end

  local signer = kumo.dkim.rsa_sha256_signer {
    domain = 'example.com',
    selector = 'default',
    headers = { 'From', 'To', 'Subject' },
    key = '../../example-private-dkim-key.pem',
  }

  msg:arc_seal(signer, 'localhost', { arc })
end)

kumo.on('get_queue_config', function(domain, tenant, campaign, routing_domain)
  return kumo.make_queue_config {
    protocol = {
      -- Redirect traffic to the sink
      smtp = {
        mx_list = { 'localhost:' .. SINK_PORT },
      },
    },
  }
end)

kumo.on('get_egress_path_config', function(domain, source_name, _site_name)
  local params = {
    enable_tls = 'OpportunisticInsecure',
    prohibited_hosts = {},
  }
  return kumo.make_egress_path(params)
end)