In order to run this port, write your opendkim.conf and:
if you use sendmail, add the milter socket `socketspec' in
/etc/mail/<your_configuration>.mc:
INPUT_MAIL_FILTER(`dkim-filter', `S=_YOUR_SOCKET_SPEC_, F=T, T=R:2m')
or if you use postfix write your milter socket `socketspec' in
/usr/local/etc/postfix/main.cf:
smtpd_milters = _YOUR_SOCKET_SPEC_
And to run the milter from startup, add milteropendkim_enable="YES" in
your /etc/rc.conf.
Extra options can be found in startup script.
Note: milter sockets must be accessible from postfix/smtpd;
using inet sockets might be preferred.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
2.10.3_24
2.10.3_23
–
FreeBSD 15
2.10.3_24
2.10.3_23
–
FreeBSD 14
2.10.3_24
2.10.3_23
2.10.3_24
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
2.10.3_23
2.10.3_23
–
FreeBSD 14
2.10.3_23
2.10.3_23
2.10.3_23
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (2)
The CVE record lists the packaged version 2.10.3_24 as affected, and no VuXML entry names the CVE. What does this mean?
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata…
An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results …
VuXML only (0)
Listed in VuXML, the packaged version 2.10.3_24 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range the packaged version has left.
needs-patchneeds-qamaintainer-feedback?merge-quarterly? mail/opendkim: 2.10.3_16 fails to start without PidFile specified in opendkim.conf or UserId specified with [:group]
Open
2023-05-29
Commits (97)
Tijl Coosemans (tijl) · 2.9.2_7
By default libtool replaces -export-symbols <file> with -retain-symbols-file <file> on ELF systems, but this doesn't really do what -export-symbols is meant to do. On GNU ELF systems it converts <file> to a simple version script first and then uses -version-script instead of -retain-symbols-file. Let USES=libtool patch libtool scripts to do this on all systems with GNU ld(1).
Bump PORTREVISION on all ports where the build log contains -export-symbols.
audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same
Makefile.am and clean up the port Makefile.
japanese/scim-honoka: Tries to hide all symbols that start with an
underscore, but because this library is written in C++ all symbols start
with _Z so it ends up hiding everything. Just don't hide anything at all
like the textproc/scim configure script does.
multimedia/schroedinger: Apply an upstream patch.
textproc/scim-input-pad: Same as japanese/scim-honoka.
PR: 201922
Approved by: portmgr (antoine)
Exp-run by: antoine
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
databases/libmemcached: Update to 1.0.18 and much more
- Update to 1.0.18 and pkg-plist accordingly
- Add LICENSE (BSD3CLAUSE) and LICENSE_FILE
- Add TEST_DEPENDS and regression-test target
- Perl is not required, remove USE_PERL and from USES
- Split LDFLAGS from CONFIGURE_ENV, they're already set there
- Add libmemcachedprotocol to CONFIGURE_ARGS (Now default: off)
- Add OPTIONS for hash functions, debug and dtrace
- pkg-descr: Update WWW: URL
- Add patches for:
* alloca.h include not found on FreeBSD
* cinttypes include location
* clang compatibility
- Strip shared libraries manually since upstream install-strip target is
fail
Changes:
https://launchpad.net/libmemcached/+announcements
[1] https://bugs.launchpad.net/libmemcached/+bug/1245562
[2] https://bugs.launchpad.net/libmemcached/+bug/1400560
Approved by: Mikhail Tsatsenko <m.tsatsenko@gmail.com> (maintainer, via email)
- Switch dns/unbound to USES=libtool, drop .la files - Bump dependent ports as .so version has changed - While here, add LICENSE_FILE to dns/getdns
Approved by: portmgr blanket
Berkeley DB cleanup, remove versions 4.0 ... 4.7. - Mk/bsd.database.mk rewrite, new default to db5. - db6 is eligible by default only if installed on the system. - Bump PORTREVISION of all ports that directly depend on BerkeleyDB or where USE_BDB is found in the port's directory - Patch a few ports such that they will pick up or work with newer versions. - Add UPDATING entry - Drive-by format
NOTE: please read UPDATING and the Wiki page before proceeding!
Announcement: http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference: https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR: 192690
Approved by: portmgr (implicit, PORTREVISION bump on unstaged ports)
- Replace security/gnutls with security/gnutls3 and update to 3.2.15 - Bump PORTREVISION on all ports that depend on security/gnutls and adjust all ports that depend on security/gnutls3 - Update mail/anubis to version 4.2 which supports gnutls 3.x - Update mail/libvmime to a development snapshot (recommended by upstream developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
Update to 2.9.2
- Options helpers
- Uses += libtool
- Regenerate pkg-plist based on 'make makeplist'
- Almost all of what was in Makefile.features disappeared due to
usage of options helpers, so make that file redundant.
PR: 191286
Approved by: maintainer timeout (> 3 weeks)
- Fix install whenever WITH_FILTER is not specified - Do not bump PORTREVISION
PR: ports/167803
Submitted by: zi
Approved by: Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Remove painful examples of foo="", with particular prejudice against constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
OpenDKIM is an open source implementation of the DKIM sender authentication system proposed by the E-mail Signing Technology Group (ESTG), now a proposed standard of the IETF (RFC4871).
The OpenDKIM package consists of a library that implements the DKIM service
and a milter-based filter application that can plug in to any milter-aware
MTA to provide that service to sufficiently recent sendmail MTAs and other
MTAs that support the milter protocol.
WWW: http://opendkim.org/
PR: ports/138232
Submitted by: Hirohisa Yamaguchi <umq@ueo.co.jp>
Feature safe: yes