On 05/05/2021 01:41, Dan Egli via Exim-users wrote:
   dkim_private_key   = ${if 
exists{/etc/exim/DKIM/${lc:$sender_address_domain}/dkim.private.key.pem}\
{/etc/exim/DKIM/${lc:$sender_address_domain}/dkim.private.key.pem}{0}}

So how do I correct this?

You look up that domain in a trusted database, so as to obtain a trusted
value.  This has to be done in a manner that Exim recognises: obtaining
untainted data that you can use in your expansion.

The "exists" check is not sufficient for this.  Replace it with a "dsearch"
lookup, since (currently) your trusted database is the filesystem.
--
Cheers,
  Jeremy

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to