5 May 2026
This is the first public pre-release of opendkim-ng, forked from OpenDKIM in early 2026. The goal is to bring the OpenDKIM filter up to date — working on current platforms, compatible with OpenSSL 3+, building cleanly against current library versions, and fit to face the internet.
This release covers the initial porting work.
Replaced the Autotools build with CMake. The daemon, library, miltertest, and Debian packaging all build from CMake.
Ported the daemon's crypto layer to OpenSSL 3.
Added Ed25519-SHA256 signing and verification per RFC 8463.
Removed rsa-sha1 from the signing algorithm table. (RSA-SHA1 remains available for verifying to stay compatible with legacy mail servers.
Added Debian packaging targeting Debian 12 (bookworm).
Modernised the systemd service unit: Type=notify, no PID file, no self-daemonisation — let systemd manage the process lifecycle.
Added support for the modern Postfix SASL authentication macro auth_authen, keeping auth_type as a fallback for older Postfix deployments.