backschues.NET - qmail and DomainKeys Identified Mail (DKIM) signing

backschues.NET

::: backschues.NET :::

Startseite

Services

Know-how
  qmail
    qmail aio patch
    qmail aio usage
    DomainKeys
    Greylisting
  Viren

Link-Sammlung

Impressum

Kontakt

::: Layout :::

Druckversion

::: Navigation :::

Suche

Sitemap

::: qmail and DomainKeys Identified Mail (DKIM) signing :::

qmail and DKIM signing
This document describes how to implement DomainKeys Identified Mail (DKIM) signing to qmail.

What do we need?

First of all we need a plain qmail or netqmail installation. No additional patching is required!
To sign messages we need libdkim 1.0.17 (Mirror) from Alt-N Technologies. It provides full support for signing, verifying, and SSP. It´s compliant with RFC 4871. Apache License V2.0 model!
Although libdkim is a portable implementation you need a patch to compile it on a Linux systen. This patch includes a small usage for libdkimtest, too. No Perl needed!

Compiling and installation of libdkim

Unpack libdkim distribution file
unzip libdkim-1.0.17.zip
Set permissions
cd libdkim/src
chmod 0644 *
Apply patch
patch < libdkim-1.0.17-1-linux-usage.patch
Compile
make LINUX=y
Copy binary and set permissions
cp libdkimtest /usr/bin
chown root:root /usr/bin/libdkimtest
chmod 0755 /usr/bin/libdkimtest

libdkim integration within qmail

Move original qmail-remote binary
mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail.remote.org
Download the qmail-remote DKIM wrapper script (Yes, it supports parent domains RFC 4871 3.8.) and save it as /var/qmail/bin/qmail-remote.
chown root:qmail /var/qmail/bin/qmail-remote
chmod 0755 /var/qmail/bin/qmail-remote

mkdir -p /var/domainkeys
chown qmailr:qmail /var/domainkeys
chmod 0700 /var/domainkeys

Create DomainKey

Download the DomainKey script and create a key with
domainkey <your domain> <your selector>

Many thanks to:

Verify incoming DKIM signed messages

::: Hotlinks :::

WebCam
Sie wollen sehen, wie es draußen bei uns aussieht?

Link-Sammlung
Ihr Wegweiser im Internet