Re: [exim] DKIM and DomainKeys

Top Page
Delete this message
Reply to this message
Author: Tom Kistner
Date:  
To: Rick Cooper
CC: Exim Users
New-Topics: Re: [exim] DKIM and DomainKeys
Subject: Re: [exim] DKIM and DomainKeys
Rick Cooper wrote:

> Is there any work being done, or a patch available, to allow signing both
> DKIM and DomainKeys without sending a message through exim twice?


The situation right now is a bit confusing.

I had added concurrent Domainkeys (via libdomainkeys) and DKIM (via
libdkim) signing support in CVS after the 4.69 release. That code was
never released, but some people run a snapshot of it.

DKIM verification support was oddly implemented, and the library I used
had some limitations at that time. It also brought in additional
build-time dependencies (lstdc++, openssl).

So I wrote my own DKIM implementation [1] which is dependency-free and
portable even to non-posix platforms like Windows. Similar to how pcre
was handled, a copy is included in the Exim source, so Exim can have
DKIM support by default on its supported platforms (I didn't try them
all of course ...).

The code is finished and in CVS. What is missing is the documentation. I
hope to finish it next week. Domainkeys support has been dropped. I
don't really feel like bringing it back, since I now consider it to be a
dead proprietary technology. If you really need to run DKIM/Domainkeys
concurrently with Exim, your only option is to pull a CVS snapshot by
date of April last year, or use the tarball I posted back then [2].

/tom

[1] http://github.com/duncanthrax/pdkim/tree/master
[2] http://duncanthrax.net/exim-experimental/exim-cvssnap-2008-03-05.tar.gz