Cisco Cisco Email Security Appliance X1070 Références techniques

D O M A I N K E Y S C O N F I G

C H A P T E R 3 : T H E C O M M A N D S : R E F E R E N C E E X A M P L E S

- NEW - Create a new domain profile.

- IMPORT - Import domain profiles from a file.

[]> new

Enter a name for this domain profile:

[]> Example

The domain field forms the basis of the public-key query. The value in

this field MUST match the domain of the sending email address or MUST

be one of the parent domains of the sending email address. This values

becomes the "d" tag of the Domain-Keys signature.

Enter the domain name of the signing domain:

[]> example.com

Selectors are arbitrary names below the "_domainkey." namespace. A

selector value and length MUST be legal in the DNS namespace and in

email headers with the additional provision that they cannot contain

a semicolon. This value becomes the "s" tag of the Domain Keys

Signature.

Enter selector:

[]> test

The canonicalization algorithm is the method by which the headers and

content are prepared for presentation to the signing algorithm.

Possible choices are "simple" and "nofws".

Select canonicalization algorithm:

1. simple

2. nofws

[2]>

The private key which is to be used to sign messages must be entered.

A corresponding public key must be published in the DNS following the

form described in the Domain Keys documentation. If a key is not

immediately available, a key can be entered at a later time.

Select the key-association method:

1. Create new key

2. Paste in key

3. Enter key at later time

4. Select existing key

[1]> 4

Enter the name or number of a signing key.

1. TestKey

Code Example 3-20

domainkeysconfig

- Example 1 (Continued)