{"id":162,"date":"2008-09-09T15:39:22","date_gmt":"2008-09-09T12:39:22","guid":{"rendered":"http:\/\/patchlog.com\/?p=162"},"modified":"2008-10-28T02:20:49","modified_gmt":"2008-10-27T23:20:49","slug":"exim-domainkeys-on-debian","status":"publish","type":"post","link":"https:\/\/patchlog.com\/linux\/exim-domainkeys-on-debian\/","title":{"rendered":"exim and domainkeys on debian"},"content":{"rendered":"<p>This post if a follow up on one of my previous posts that described how you can <a href=\"http:\/\/patchlog.com\/linux\/debian-building-custom-exim-packages\/\">create a custom exim package on debian<\/a>.\n<\/p>\n<p>\nIn this post I will show you how to compile and configure exim with domainkeys support. The configuration will be only for signing outgoing emails but it's easy to make it verify signed messages if you read <a href=\"http:\/\/wiki.exim.org\/DomainKeys\">the exim DomainKeys documentation<\/a>\n<\/p>\n<p>To do this first follow the steps described in my previous post and between steps 7 and 8  do these steps :<\/p>\n<ol>\n<li>install  libdomainkeys:<br \/>\ndownload from: <a href=\"http:\/\/domainkeys.sourceforge.net\/\">domainkeys.sourceforge.net<\/a> , extract and make:<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<p>if it doesn't compile with errors about resolv   do this:<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<p>to install just copy the static lib and the header files:<\/p>\n<pre lang=\"bash\" >\r\ncp libdomainkeys.a \/usr\/local\/lib\r\ncp domainkeys.h dktrace.h  \/usr\/local\/include\r\n<\/pre>\n<p>and then cleanup :<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<\/li>\n<li>Configure the exim custom package for domainkeys:<br \/>\nadd domainkeys support to exim makefile:<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<p>And now continue with step 8 in the <a href=\"http:\/\/patchlog.com\/linux\/debian-building-custom-exim-packages\/\">previous post<\/a>\n<\/p>\n<\/li>\n<\/ol>\n<p>When you're done all that's left to do is edit exim configuration to enable domain keys signing:<\/p>\n<p>open \/etc\/exim4\/exim4.conf\u00c2\u00a0 or \/etc\/exim4\/exim4.conf.template\u00c2\u00a0 in an editor<\/p>\n<p>look up for the remote_smtp transport definition and add the following configuration to it:<\/p>\n<pre>\r\ndk_domain = ${lc:${domain:$h_from:}}\r\ndk_selector = default\r\ndk_private_key = \/etc\/exim4\/dk_keys\/${dk_domain}_priv.key\r\n<\/pre>\n<h3>Key management<\/h3>\n<p>create the directory that will hold the keys :<\/p>\n<p>mkdir \/etc\/exim4\/dk_keys<\/p>\n<p>create the scripts that will generate and show the the keys :<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<p>generate a key for a new domain:<\/p>\n<pre><ol><li style=\"font-family: 'Courier New', Courier, monospace; color: black; font-weight: normal; font-style: normal;\"><div style=\"font-family: 'Courier New', Courier, monospace; font-weight: normal;\">&nbsp;<\/div><\/li><\/ol><\/pre>\n<p>After you set the DNS TXT record you can test the new setup by sending an email from the newly configured domain to an account @ gmail or yahoo . At gmail view the new message and click on \"details\", it should show up as \"signed-by: my_new_domain.tld\" , yahoo will just show an icon with a key in the message header. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>This post if a follow up on one of my previous posts that described how you can create a custom exim package on debian. In this post I will show you how to compile and configure exim with domainkeys support. The configuration will be only for signing outgoing emails but it&#8217;s easy to make it &hellip; <a href=\"https:\/\/patchlog.com\/linux\/exim-domainkeys-on-debian\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">exim and domainkeys on debian<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[2],"tags":[187,38,185],"class_list":["post-162","post","type-post","status-publish","format-standard","hentry","category-linux","tag-debian","tag-domainkeys","tag-exim"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pofPh-2C","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/posts\/162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/comments?post=162"}],"version-history":[{"count":22,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/posts\/162\/revisions"}],"predecessor-version":[{"id":195,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/posts\/162\/revisions\/195"}],"wp:attachment":[{"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/media?parent=162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/categories?post=162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/patchlog.com\/wp-json\/wp\/v2\/tags?post=162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}