On Thu, 12 Dec 2024 19:45:40 +0100,
Stuart Henderson <s...@spacehopper.org> wrote:
> 
> On 2024/12/12 18:57, Kirill A. Korinsky wrote:
> 
> your mail-followup-to is set a bit strangely here (only to you and
> not the list..), I've readded ports@ to cc
>

Thanks! I had missed things a bit up. I planned to add martijn@ to Cc but
something goes quite wrong.

> > ports@,
> > 
> > I'd like to share with you a port of mail/opensmtpd-filter-sign.
> > 
> > This filter is a fork of mail/opensmtpd-filter-dkimsign, which introduced
> > support for both ACR sign and seal.
> > 
> > It can be used as an in-place replacement for filter-dkimsign.
> > 
> > New ACR-related options:
> >  -A is a switch to create ACR signature;
> >  -S is a switch to create ACR seal.
> 
> I guess you mean ARC?
>

Indeed, I mean ARC.

> > Additionally, it supports -D file where you can keep one line per domain
> > instead of -d domain1 -d domain2 -d domain3.
> > 
> > The code is available here: https://github.com/catap/opensmtpd-filter-sign
> > 
> > I have been using it for more than 6 months on my servers, and the last fix
> > was made about 6 months ago, and I think this code is ready to be tested by
> > anyone who is interested.
> 
> The @pkgpath entry in the PLIST for this will cause problems.
> Using the same UID for two separate ports is a bit unusual (unless
> they're multiple ports which are part of a larger combined piece).
>
> Is there a benefit to having two separate ports for this and
> filter-dkimsign?
> 
> Might be best to discuss with martijn@ and find a good way forward ..
> 

The goal is make a port which easy test. Current PLIST, as far as I
understand, allows to install it on the system in parallel with dkimsign and
test it by swithing filter in smtpd.conf. No need to touching permission for
keys and similar things.

The next step can be a replacment for dkimsign, but I think that it needs a
new user and some change in file owners.

Or the changes can be incorporated into dkimsign if martijn@ ok with that,
but without renaming it looks wired.

-- 
wbr, Kirill

Reply via email to