Cisco Cisco Email Security Appliance C170 Folheto

AsyncOS 9.6 for Cisco Email Security Appliances CLI 참조 가이드

3 장     명령: 참조 예제

  도메인 키

No domain profiles are defined.

Choose the operation you want to perform:

- NEW - Create a new domain profile.

- IMPORT - Import domain profiles from a file.

[]> new

Enter a name for this domain profile:

[]> Example

Enter type of domain profile:

1. dk

2. dkim

[2]>

The domain field forms the basis of the public-key query.  The value in

this field MUST match the domain of the sending email address or MUST

be one of the parent domains of the sending email address.  This value

becomes the "d" tag of the Domain-Keys signature.

Enter the domain name of the signing domain:

[]> example.com

Selectors are arbitrary names below the "_domainkey." namespace. A

selector value and length MUST be legal in the DNS namespace and in

email headers with the  additional provision that they cannot contain a

semicolon.  This value becomes the "s" tag of the DomainKeys

Signature.

Enter selector:

[]> test

The private key which is to be used to sign messages must be entered.

A corresponding public key must be published in the DNS following the

form described in the DomainKeys documentation.  If a key is not

immediately available, a key can be entered at a later time.

Select the key-association method:

1. Create new key

2. Paste in key

3. Enter key at later time

4. Select existing key

[1]> 4

Enter the name or number of a signing key.

1. testkey

[1]>

The canonicalization algorithm is the method by which the headers and

content are  prepared for presentation to the signing algorithm.

Possible choices are "simple" and "relaxed".

Select canonicalization algorithm for body:

1. simple

2. relaxed

[1]> 1

How would you like to sign headers:

1. Sign all existing, non-repeatable headers (except Return-Path header).