To begin, please scuse my english, i'm french and i'm bad in english !!!
I use libdkim to implement DKIM signing and verifying into qmail.
I developed some additionnal features :
- Replacement of SSP by ADSP
- I use a special library for DKIM verification with SHA256. ( I've got openssl 0.97 and SHA256 is not implemented. I can't upgrade to 0.98).
- SHA256 is disable for DKIM signing
- Modification of the Makefile
- New options for libdkimtest :
- You can write the DKIM verification return in a file. The return are email headers like : "dkim: pass", "dkim: none", ... . If you enable ADSP, you have a special return in the same file like : "dkim-adsp: discard", "dkim-adsp: pass", ...
- You can enable/disable ADSP verification
- If there is a multiple signature, you can choose a strict policy, or a less strict
DKIM into qmail works like this :
Signature :
- I write the mail in a temp file
- I give the temp file path name to libdkimtest
- Libdkimtest compute the signature and add it to the mail
- I send the signed mail to the remote host
Verification :
- I write the remote mail in a temp file
- I give the temp file path name to libdkimtest
- libdkimtest verifyes the mail, and write the return values (DKIM and ADSP) in a second temp file
- Qmail send this return value and the remote mail to spamassassin
- Spamassassin get the return values scores in his new rules
If this patch interest you, enjoy !!!
If you've got some problems contact me : luc.pallavidino@gmail.com
Good bye.