On 02/07/2020 23:11, Marco Gaiarin via Exim-users wrote:
>
> I'm used, in exim on debian stretch (4.89-2+deb9u7) add something like:
>
> DKIM_CANON = relaxed
> DKIM_SELECTOR = 2020
> DKIM_DOMAIN = ${lc:${domain:$h_from:}}
> DKIM_PRIVATE_KEY = ${if exists{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{0}}
>
> to enable DKIM for selected 'from' addresses in my servers, using predefined
> '.ifdef' in predefined debian transports.
>
> I've done the same on buster (exim 4.92-8+deb10u4), but DKIM headers get not
> added.
>
>
> Why? Thanks.
You didn't mention what, if any errors were logged.
I'm guessing you're trying to use a tainted string as a filename.
If so, the usual rules apply: you must now verify the string in
a way that Exim understands, so as to produce an untainted string
which you are then allowed to use in opening a file.
For your purpose, since it's a file that must exist in the filesystem
you can use a dsearch lookup. And that replaces your exists{} test
also.
--
Cheers,
Jeremy
