Bug 2489387 - Review Request: phoenixdkim - Security-focused DKIM signing and verifying milter
Summary: Review Request: phoenixdkim - Security-focused DKIM signing and verifying milter
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL: https://www.phoenixdkim.org/
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-06-16 20:16 UTC by Edmund Lodewijks
Modified: 2026-07-24 15:15 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Edmund Lodewijks 2026-06-16 20:16:10 UTC
FE-NEEDSPONSOR

Spec URL: https://download.copr.fedorainfracloud.org/results/edmundlod/PhoenixDKIM/srpm-builds/10609869/phoenixdkim.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/edmundlod/PhoenixDKIM/srpm-builds/10609869/phoenixdkim-1.0.0-1.src.rpm

Copr (builds + repo): https://copr.fedorainfracloud.org/coprs/edmundlod/PhoenixDKIM/


Short Description: phoenixdkim - Security-focused DKIM signing and verifying milter

Long Description:
PhoenixDKIM is a standalone DKIM signing and verification milter, descended
from OpenDKIM, with a focus on security and correctness. It uses the OpenSSL 3
EVP API, signs with RSA and Ed25519 (RFC 8463), and drops weak crypto
(no RSA-SHA1 signing; 2048-bit key minimum). It reads OpenDKIM-style key and
signing tables.
  
Fedora Account System (FAS) name: edmundlod

This is my first Fedora package; I am seeking a sponsor.

Builds clean on rawhide (mock); %check runs the full upstream test suite (201
tests, all pass). rpmlint is clean apart from reviewed false-positives, which a
shipped phoenixdkim.rpmlintrc documents: 
 - spelling-error milter/genkey/genzone/testkey/testmsg — domain terms
 - non-standard uid/gid and 0750 /etc/phoenixdkim/keys — dedicated "phoenixdkim"
   daemon user (sysusers.d); private signing keys are group-readable only
 - gethostbyname in miltertest — test driver, inet path only (suite uses unix
   sockets); getaddrinfo migration tracked upstream and will land in the next
   release
     
License: BSD-3-Clause AND Sendmail-Open-Source-1.1 — the same expression
Fedora's `opendkim` package ships. The upstream tarball is OpenPGP-signed and
verified in %prep via %gpgverify.

Reproducible: Always

Comment 1 Artur Frenszek-Iwicki 2026-07-24 15:15:51 UTC
Hi Edmund, please upload the spec and srpm to some persistent storage.
COPR deletes the files after a couple of days and both your links are now 404.


Note You need to log in before you can comment on or make changes to this bug.