dkim_verify plugin

This plugin will verify DKIM signatures as defined by RFC 6376 and add an Authentication-Results header as appropriate.

Configuration

  • allowed_time_skew
    How far can we stretch on time matching, in secs. Useful when clock is skewed.
  • sigerror_log_level

Testing

This plugin also provides a command-line test tool that can be used to debug DKIM issues or to check results.

# dkimverify < message
identity="@gmail.com" domain="gmail.com" result=pass

You can add --debug to the option arguments to see a full trace of the processing.

Notes

This plugin and underlying library does not currently support DKIM body length limits (l=).

Table of Contents