Ahoj, Dňa Sat, 9 Mar 2024 15:38:43 +0000 Jeremy Harris via Exim-users <exim-users@lists.exim.org> napísal:
> However, the text of the headers (and body) of the message used as > input for the various hashes and signatures of the DKIM signing *is* > the output of any transport filter (this adds significant coding and I will leave transport_filter out, as i agree with you, that using headers_rewrite is much better and straightforward for this. > cpu overhead, as it happens). The documentation for this is the > source-code, for anybody caring that much. Reading of source code is not as easy for someone who don't speak C... > These facilities are applied before any transport filter, and hence > before the dkim signing operation. I am reasonably sure that a > rewrite will be visible in $h_* expansion syntax used in dkim signing > option. However, the result of adds and removes will not be > (sigh. That should probably be fixed). I did test which confirms my early tests (stock debian stable): Exim version 4.96 #2 built 01-Jan-2024 16:58:00 I setup in transport (beside others): headers_rewrite = *@mailt.internal $1@real frs ... dkim_domain = ${acl{dkim_dom}} dkim_private_key = ${acl{dkim_key}} dkim_selector = default I defined ACLs for that, to log values: dkim_dom: accept logwrite = DKIMrw: from_domain ${domain:$rh_from:} message = ${domain:$rh_from:} dkim_key: accept logwrite = DKIMrw: dkim_domain $dkim_domain And sending test message (via stdin) results in logs: 1rjGgs-000eYe-0U <= root@mailt.internal U=root P=local S=418 1rjGgs-000eYe-0U DKIMrw: from_domain mailt.internal 1rjGgs-000eYe-0U DKIMrw: dkim_domain mailt.internal 1rjGgs-000eYe-0U => my@real ... I didn't setup key for this test, thus signing doesn't happen, but from log one can see that from_domain & dkim_domain has value before rewrite (received message has rewritten values). regards -- Slavko https://www.slavino.sk
pgpefFRStT19g.pgp
Description: Digit??lny podpis OpenPGP
-- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/