https://bugzilla.redhat.com/show_bug.cgi?id=2489387
Bug ID: 2489387
Summary: Review Request: phoenixdkim - Security-focused DKIM
signing and verifying milter
Product: Fedora
Version: rawhide
Hardware: All
URL: https://www.phoenixdkim.org/
OS: Linux
Status: NEW
Component: Package Review
Severity: medium
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
Target Milestone: ---
Classification: Fedora
FE-NEEDSPONSOR
Spec URL:
https://download.copr.fedorainfracloud.org/results/edmundlod/PhoenixDKIM/srpm-builds/10609869/phoenixdkim.spec
SRPM URL:
https://download.copr.fedorainfracloud.org/results/edmundlod/PhoenixDKIM/srpm-builds/10609869/phoenixdkim-1.0.0-1.src.rpm
Copr (builds + repo):
https://copr.fedorainfracloud.org/coprs/edmundlod/PhoenixDKIM/
Short Description: phoenixdkim - Security-focused DKIM signing and verifying
milter
Long Description:
PhoenixDKIM is a standalone DKIM signing and verification milter, descended
from OpenDKIM, with a focus on security and correctness. It uses the OpenSSL 3
EVP API, signs with RSA and Ed25519 (RFC 8463), and drops weak crypto
(no RSA-SHA1 signing; 2048-bit key minimum). It reads OpenDKIM-style key and
signing tables.
Fedora Account System (FAS) name: edmundlod
This is my first Fedora package; I am seeking a sponsor.
Builds clean on rawhide (mock); %check runs the full upstream test suite (201
tests, all pass). rpmlint is clean apart from reviewed false-positives, which a
shipped phoenixdkim.rpmlintrc documents:
- spelling-error milter/genkey/genzone/testkey/testmsg — domain terms
- non-standard uid/gid and 0750 /etc/phoenixdkim/keys — dedicated
"phoenixdkim"
daemon user (sysusers.d); private signing keys are group-readable only
- gethostbyname in miltertest — test driver, inet path only (suite uses unix
sockets); getaddrinfo migration tracked upstream and will land in the next
release
License: BSD-3-Clause AND Sendmail-Open-Source-1.1 — the same expression
Fedora's `opendkim` package ships. The upstream tarball is OpenPGP-signed and
verified in %prep via %gpgverify.
Reproducible: Always
--
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2489387
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202489387%23c0
--
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
