FS#62867 - [exim] Enable DMARC and ARC support

Attached to Project: Community Packages
Opened by Chris (cimnine) - Monday, 10 June 2019, 16:11 GMT
Last edited by Buggy McBugFace (bugbot) - Saturday, 25 November 2023, 20:07 GMT
Task Type Feature Request
Category Packages
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 5
Private No

Details

Exim 4.92 has experimental support for DMARC and for ARC, but it's not enabled in Arch Linux. What is the policy for enabling experimental features? Could it be enabled?

For DMARC it would be setting `EXPERIMENTAL_DMARC` [0][1]. The main dependency, Opendmarc, is already packaged for Arch.

`EXPERIMENTAL_ARC` support [2] does not depend on anything and could be enabled right away.

[0] https://github.com/Exim/exim/blob/exim-4.92/doc/doc-txt/experimental-spec.txt#L393
[1] https://github.com/Exim/exim/blob/exim-4.92/src/src/EDITME#L481-L486
[2] https://github.com/Exim/exim/blob/exim-4.92/src/src/EDITME#L488-L490
This task depends upon

Closed by  Buggy McBugFace (bugbot)
Saturday, 25 November 2023, 20:07 GMT
Reason for closing:  Moved
Additional comments about closing:  https://gitlab.archlinux.org/archlinux/p ackaging/packages/exim/issues/1
Comment by Nigel Kukard (nkukard) - Tuesday, 28 April 2020, 11:15 GMT
Would be very nice to have support for DMARC and ARC, if at all possible :) Added my vote
Comment by loqs (loqs) - Tuesday, 28 April 2020, 15:22 GMT
Perhaps DMARC support should be deferred until after  FS#63812  CVE-2019-16378 is resolved.
Comment by Caleb Maclennan (alerque) - Saturday, 01 May 2021, 18:26 GMT
Unlike similar issues that were open for SPF & DANE that had been resolved but the issues not updated, this one does not appear to be fixed yet.

As of 4.93 upstream DMARC support is considered stable. I think it should be brought downstream to the Arch builds by default.

The CVE issue in opendmarc linked in comments above has also been fixed.
Comment by loqs (loqs) - Saturday, 01 May 2021, 20:48 GMT
Please provide a diff of the changes you made to the PKGBUILD to enable DMARC.
Have you encountered any issues during your testing of the feature with the modified package?
Comment by Giovanni Bottaro (bgiovanni) - Wednesday, 28 June 2023, 17:40 GMT
The attached patches enable openDMARC support at build time in Exim.

The 0002.patch deals with the toggling of the necessary options in the build configuration file, introduces the new dependencies required in the PKGBUILD (opendmarc, publicsuffix-list) and takes care of applying a patch to fix building with newer versions of openDMARC.

The 0001.patch was picked up from https://src.fedoraproject.org/rpms/exim/blob/rawhide/f/exim-4.96-opendmarc-1.4-build-fix.patch and is mandatory to get Exim to build with openDMARC v1.4.
This was already patched upstream in the master branch, however Fedora's patch is slightly less clumsy than that one, this shouldn't be an issue.

Here's the correct link to the 0002.patch: https://bugs.archlinux.org/index.php?getfile=22895
I screwed up the first upload and now I can't delete it anymore, sigh.

The patches don't deal with ARC support as it seems like it's still marked as experimental.
   0001-Support-openDMARC-v1.4-i... (1.2 KiB)
   0002-Enable-openDMARC-support... (3.2 KiB)
   0002-Enable-openDMARC-support... (3.8 KiB)
Comment by Buggy McBugFace (bugbot) - Tuesday, 08 August 2023, 19:11 GMT
This is an automated comment as this bug is open for more then 2 years. Please reply if you still experience this bug otherwise this issue will be closed after 1 month.
Comment by Giovanni Bottaro (bgiovanni) - Saturday, 19 August 2023, 12:24 GMT
I'd like to rectify the above patches for OpenDMARC support.

Recently upstream has setup a new branch "exim-4.96+fixes" which among things has fixed building Exim with OpenDMARC in its newer versions.
You can find the announcement here: https://lists.exim.org/lurker/message/20230728.125608.fea08054.en.html

I think that as long as a newer version of Exim hasn't been released the exim package should move to that branch.

EDIT: Oh, btw the enablement of some opendmarc flags in the exim.Makefile is still required, including the new publicsuffix-list dependency. These can be picked up from the patches I attached above.

Loading...