Re: [exim] Tainted filename for DKIM

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Jeremy Harris
Dátum:  
Címzett: exim-users
Tárgy: Re: [exim] Tainted filename for DKIM
On 02/06/2020 14:22, Jeremy Harris via Exim-users wrote:
> On 02/06/2020 13:50, Franz-Werner Gergen via Exim-users wrote:
>>   dkim_private_key   = ${if
>> exists{/usr/local/dkim/${dkim_domain}.${dkim_selector}.priv.pem}{/usr/local/dkim/${dkim_domain}.${dkim_selector}.priv.pem}{false}}
>
>
>> Tainted filename '/usr/local/dkim/is.mpg.de.20190121.priv.pem'
>
> Assuming your build includes the dsearch lookup,
> replace your "if exists" expansion with
> ${lookup {${dkim_domain}.${dkim_selector}.priv.pem} dsearch {/usr/local/dkim}}


On thinking more, for your purpose:

${lookup {${dkim_domain}.${dkim_selector}.priv.pem} dsearch,ret=full {/usr/local/dkim}}


--
Cheers,
Jeremy