Re: [exim] Tainted filename on DKIM signing in 4.94

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: Re: [exim] Tainted filename on DKIM signing in 4.94
On 30/06/2020 13:59, Andy Smith via Exim-users wrote:
> remote_smtp:
> driver = smtp
> dkim_domain = ${sender_address_domain}
> dkim_selector = dkimxy
> dkim_private_key = ${if exists \
> {/usr/local/etc/exim/${sender_address_domain}/dkim.private.key}\
> {/usr/local/etc/exim/${sender_address_domain}/dkim.private.key}\
> {false}}
> dkim_canon = relaxed
>
> I'm unsure if this is the case on the other thread, but my requirement
> is to choose the key based on the sender domain so as to support unique
> DKIM keys for multiple domains. Can anyone advise?


Something along the lines of

dkim_private_key = \
    ${lookup {${sender_address_domain}} \
        dsearch,ret=full {/usr/local/etc/exim} \
        {$value/dkim.private.key} {false}}
-- 
Cheers,
  Jeremy