On 05/12/2022 05:46, Victor Sudakov via Exim-users wrote:
Can you give me an address to send a test mail to on one of your
Debian receivers?

I cannot; that was an internal-only test VM, not internet-facing.

The body-hash differing implies, I think, that the signature algorithm isn't
involved.  I was using sha256; what's yours?

Hmm, how do I figure out? Below is the complete sender configuration,
without hiding anything:

remote_smtp:
   driver = smtp
   message_size_limit = ${if > {$max_received_linelength}{998} {1}{0}}
   dkim_domain = library.tomsk.ru
   dkim_selector = 20221203
   dkim_private_key = /usr/local/etc/exim/dkim/library.tomsk.ru-private.pem
   dkim_canon = relaxed
   dkim_sign_headers = Date:From:To:Subject:Message-Id:In-Reply-To

I think it's using some exim default algorithm.

As the docs say, the default for dkim_hash is sha256.

What should I add to acl_smtp_dkim to enable debugging?

In ACL for (DATA-or-earlier) - not the DKIM ACL -

  warn
    ( any conditions preferred to limit what gets debugged,
    eg. hosts = my.test.source.ip )

    control = debug/tag=.dkimtest/opts=+all

--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to