Technical References

3-36
CLI Reference Guide for AsyncOS 9.7 for Cisco Email Security Appliances
Chapter 3 The Commands: Reference Examples
Domain Keys
Table 3-2 domainkeysconfig New Signing Profile Arguments
Argument Description
<name>
Name of domain profile.
<type>
Type of domain. Can be dk or dkim.
<domain>
Domain field of domain profile. This forms the d tag
of the Domain-Keys signature.
<selector>
Selector field of domain profile. This forms the s tag
of the Domain-Keys signature.
<user-list>
Comma separated list of domain profile users. Users
are used to match against email addresses to
determine if a specific domain profile should be used
to sign an email. Use the special keyword
all to
match all domain users.
[options]
--key_name
The name of the private key that will be used for
signing.
--canon
The canonicalization algorithm to use when signing
by DK. Currently supported algorithms are
simple
and
nofws. Default is nofws.
--body_canon
The body canonicalization algorithm of to use when
signing by DKIM. Currently supported algorithms
are
simple and relaxed. Default is simple.
--header_canon
The headers canonicalization algorithm of to use
when signing by DKIM. Currently supported
algorithms are
simple and relaxed. Default is
simple.
--body_length
Number of bytes of canonicalized body that are used
to calculate the signature. Is used only in DKIM
profiles. If used this value becomes
l tag of the
signature. By default it is not used.
--headers_select
Detrmines how to select headers for signing. Is used
only in DKIM profiles. Can be one of
all,
standard, standard_and_custom. all means to sign
all non-repetitive headers. "standard" means to sign
pedefined set of well known headers such as Subject,
From, To, Sender, MIME heades etc.
standard_and_custom means to sign well known
headers and user-defined set of headers. Default is
standard.
--custom_headers
User-defined set of headers to sign. Is used only in
DKIM profiles if
headers_select is
standard_and_custom. Default is empty set.
--i_tag
Determines whether to include the i tag into the
signature. Possible values are
yes or no. Default is
yes.