Skip to content

Commit a05fead

Browse files
committed
Update manual of opendkim.conf and RELEASE_NOTE for KeyTable extension
1 parent 6e75699 commit a05fead

File tree

2 files changed

+11
-2
lines changed

2 files changed

+11
-2
lines changed

RELEASE_NOTES

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,8 @@ release, and a summary of the changes in that release.
1313
Make odkim.internal_ip() available to all Lua hooks. Problem noted
1414
by Iosif Fettich.
1515
Make bind code DNSSEC-aware. Patch from Jack Bates.
16+
Extend KeyTable to specify signing algorithm.
17+
Patch from Yasuhito Futatsuki.
1618
Fix dkimf_db_nextpunct() so it doesn't incorrectly identify an encoded
1719
hex digit as a value delimiter.
1820
Fix issue #8: The password file critical section isn't big enough.

opendkim/opendkim.conf.5.in

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -349,15 +349,22 @@ If present, overrides any
349349
setting in the configuration file. The data set named here maps each key
350350
name to three values: (a) the name of the domain to use in the signature's
351351
"d=" value; (b) the name of the selector to use in the signature's "s=" value;
352-
and (c) either a private key or a path to a file containing a private key.
352+
and (c) either a private key or a path to a file containing a private key;
353+
(d) (optional) signing algorithm to use with this key.
353354
If the first value consists solely of a percent sign ("%") character,
354355
it will be replaced by the apparent domain of the sender when generating
355356
a signature.
356357
If the third value starts with a slash ("/") character, or "./" or "../",
357358
then it is presumed to refer to a file from which the private key should
358359
be read, otherwise it is itself a PEM-encoded private key or a base64-encoded
359360
DER private key; a "%" in the third value in this case will be replaced by
360-
the apparent domain name of the sender. The
361+
the apparent domain name of the sender. The fourth field should be one
362+
of supported siginig algorithms (see
363+
.I SignatureAlgorithm
364+
below).
365+
If it is omited, the algorithm specified in
366+
.I SignatureAlgorithm
367+
is used for the key.
361368
.I SigningTable
362369
(see below) is used to select records from this table to be used to add
363370
signatures based on the message sender.

0 commit comments

Comments
 (0)