Re: [exim] DKIM and debian buster...

Top Page
Delete this message
Reply to this message
Author: Marco Gaiarin
Date:  
To: Jeremy Harris via Exim-users
CC: exim-users
Subject: Re: [exim] DKIM and debian buster...
Mandi! Jeremy Harris via Exim-users
In chel di` si favelave...

> Run the exim that results in the transport be run,
> with debug turned on.
> If this test message is smtp-fed, that'll be the daemon.
> If commandline, it's the one you start.
> Grab stderr to file, for later perusal.
> Feed in the test message.
> Find the bit of debug output that shows your transport being run.


Ok. I've tried:

    exim4 -d+all -i gaio@???


with the working:
    DKIM_PRIVATE_KEY = /etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem

    
and the result is:

22:58:03  8336 ---
22:58:03  8336  ???considering: ${lc:${domain:$h_from:}}
22:58:03  8336   ???considering: ${domain:$h_from:}}
22:58:03  8336    ???considering: $h_from:}}
22:58:03  8336    ?????????expanding: $h_from:
22:58:03  8336    ??????????????????result: gaio@???
22:58:03  8336   ?????????expanding: ${domain:$h_from:}
22:58:03  8336   ??????????????????result: pnlug.it
22:58:03  8336  ?????????expanding: ${lc:${domain:$h_from:}}
22:58:03  8336  ??????????????????result: pnlug.it
22:58:03  8336  ???considering: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem
22:58:03  8336   ???considering: ${domain:$h_from:}}-2020-private.pem
22:58:03  8336    ???considering: $h_from:}}-2020-private.pem
22:58:03  8336    ?????????expanding: $h_from:
22:58:03  8336    ??????????????????result: gaio@???
22:58:03  8336   ?????????expanding: ${domain:$h_from:}
22:58:03  8336   ??????????????????result: pnlug.it
22:58:03  8336  ?????????expanding: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem
22:58:03  8336  ??????????????????result: /etc/exim4/dkim/pnlug.it-2020-private.pem
22:58:03  8336 PDKIM (checking verify key)>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
22:58:03  8336 DNS lookup of 2020._domainkey.pnlug.it. (TXT) succeeded
22:58:03  8336 PDKIM >> Parsing public key record >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>



Then i've put:

    DKIM_PRIVATE_KEY = ${if exists{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{0}}


and the same command lead to:

23:03:36  9466 ---
23:03:36  9466  ???considering: ${lc:${domain:$h_from:}}
23:03:36  9466   ???considering: ${domain:$h_from:}}
23:03:36  9466    ???considering: $h_from:}}
23:03:36  9466    ?????????expanding: $h_from:
23:03:36  9466    ??????????????????result: gaio@???
23:03:36  9466   ?????????expanding: ${domain:$h_from:}
23:03:36  9466   ??????????????????result: pnlug.it
23:03:36  9466  ?????????expanding: ${lc:${domain:$h_from:}}
23:03:36  9466  ??????????????????result: pnlug.it
23:03:36  9466  ???considering: ${if exists{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466   ???considering: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ???considering: ${domain:$h_from:}}-2020-private.pem}{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ??????considering: $h_from:}}-2020-private.pem}{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ????????????expanding: $h_from:
23:03:36  9466    ?????????????????????result: gaio@???
23:03:36  9466    ?????????expanding: ${domain:$h_from:}
23:03:36  9466    ??????????????????result: pnlug.it
23:03:36  9466   ?????????expanding: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem
23:03:36  9466   ??????????????????result: /etc/exim4/dkim/pnlug.it-2020-private.pem
23:03:36  9466  ?????????condition: exists{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}
23:03:36  9466  ??????????????????result: true
23:03:36  9466   ???considering: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ???considering: ${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ??????considering: $h_from:}}-2020-private.pem}{0}}
23:03:36  9466    ????????????expanding: $h_from:
23:03:36  9466    ?????????????????????result: gaio@???
23:03:36  9466    ?????????expanding: ${domain:$h_from:}
23:03:36  9466    ??????????????????result: pnlug.it
23:03:36  9466   ?????????expanding: /etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem
23:03:36  9466   ??????????????????result: /etc/exim4/dkim/pnlug.it-2020-private.pem
23:03:36  9466   ????????????scanning: 0}}
23:03:36  9466   ?????????expanding: 0
23:03:36  9466   ??????????????????result: 0
23:03:36  9466   ????????????skipping: result is not used
23:03:36  9466  ?????????expanding: ${if exists{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{/etc/exim4/dkim/${lc:${domain:$h_from:}}-2020-private.pem}{0}}
23:03:36  9466  ??????????????????result: /etc/exim4/dkim/pnlug.it-2020-private.pem
23:03:36  9466 PDKIM (checking verify key)>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
23:03:36  9466 DNS lookup of 2020._domainkey.pnlug.it. (TXT) succeeded
23:03:36  9466 PDKIM >> Parsing public key record >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>


And so seems that work too... i'm puzzled...


I've retried with MUA, and effectively DKIM headers get added. Boh. I was
absolutely sure that was not the case.

Sorry to the list, and thanks...


>> I hope i was clear now. Thanks.
> No. Clear, but nowhere near sufficient, for someone without your
> system configuration to tell how that macro is being used.


Aaah... i've wrote it but not specified clearly, effectively.

I use a modified version of debian template file, so the transport
configuration is simply:

remote_smtp:
debug_print = "T: remote_smtp for $local_part@$domain"
driver = smtp
[...]
.ifdef DKIM_DOMAIN
dkim_domain = DKIM_DOMAIN
.endif
.ifdef DKIM_SELECTOR
dkim_selector = DKIM_SELECTOR
.endif
.ifdef DKIM_PRIVATE_KEY
dkim_private_key = DKIM_PRIVATE_KEY
.endif
.ifdef DKIM_CANON
dkim_canon = DKIM_CANON
.endif
.ifdef DKIM_STRICT
dkim_strict = DKIM_STRICT
.endif
.ifdef DKIM_SIGN_HEADERS
dkim_sign_headers = DKIM_SIGN_HEADERS
.endif
[...]


Again, thanks.

-- 
  La tua tana sta in collina, Dr. Dobermann, seimilioni a metro quadro
  e tua moglie sembra proprio una regina,
  pero` e` la moglie di un ladro.            (F. De Gregori)