filter-dkimsign - add dkim signature to messages

       Martijn van Duren <martijn@openbsd.org>

Ubuntu                                           January 9, 2025                              FILTER-DKIMSIGN(8)

filter-dkimsign adds a dkim signature to the message.  The following flags are supported:

       -aalgorithm
               The  algorithm to use.  Supported signing algorithms are rsa and ed25519 (when enabled at compile
               time).  Only sha256 should be used for hashing,  since  other  algorithms  are  most  likely  not
               supported by verifiers.  Defaults to rsa-sha256.

       -ccanonicalization
               The canonicalization algorithm used to sign the message.  Defaults to simple/simple.

       -ddomain
               The  domain  where  the  public key can be found.  This option can be specified multiple times to
               select the best domain during signing.  If specified  multiple  times  it  looks  at  the  domain
               component  of  the first mailbox in the from-header and tries to find a match.  If no exact match
               can be found it looks for the closest parent domain.  If no  matches  can  be  the  first  domain
               specified will be used.

       -hheaders
               The  email  headers  which  are  included in the mail signature.  Per RFC this option requires at
               least the from header to be included.  The headers are specified by separating them with a colon.
               The default  is  from:reply-to:subject:date:to:cc:resent-date:resent-from:resent-to:resent-cc:in-reply-to:references:list-id:list-help:list-unsubscribe:list-subscribe:list-post:list-owner:list-archive.

       -kfilefile should point to a file containing the RSA private key to sign the messages.

       -sselector
               The selector within the _domainkey subdomain of domain where the public key can be found.

       -t      Add the time of signing to the dkim header.

       -xseconds
               Add the amount of seconds the signature is valid to the dkim header.

       -z      Add  the mail headers used in the dkim signature to the dkim header.  If a second -z is specified
               all headers will be included in the dkim header.  Useful for debugging purposes.

filter-dkimsign - add dkim signature to messages

smtpd(8)

       D. Crocker, Ed., T. Hansen, Ed., and M. Kucherawy, Ed., DomainKeysIdentifiedMail(DKIM)Signatures, RFC
       6376, Brandenburg InternetWorking, AT&T Laboratories, and Cloudmark, September 2011.

       J. Levine, ANewCryptographicSignatureMethodforDomainKeysIdentifiedMail,  RFC  8463,  Taughannock
       Networks, September 2018.

filter-dkimsign [-tz] [-aalgorithm] [-ccanonicalization] [-hheaders] [-xseconds] -ddomain-kfile-sselector