Skip to content

configurable DKIM key bits

Joey Hewitt requested to merge scintill/nixos-mailserver:dkim-bits into master

This patch allows configuring the number of bits in generated DKIM keys. There is a test included, which makes sure the generated key has the correct number of bits.

It's pretty straightforward. One potential improvement would be disallowing values below something like 1024, to prevent unsafe configurations.

I also, in the tests, set dovecot's dhparam bits really low. It seemed to make the tests complete faster, but can someone confirm that's expected and that it's a useful change for testing?

Merge request reports