opendkim-ng 3.0.0-beta1 (project renamed to PhoenixDKIM on 21 May 2026)
5 May 2026
This is the first public pre-release of opendkim-ng, forked from OpenDKIM in early 2026. The goal is to bring the OpenDKIM filter up to date — working on current platforms, compatible with OpenSSL 3+, building cleanly against current library versions, and fit to face the internet.
This release covers the initial porting work.
Build system
-
Replaced the Autotools build with CMake. The daemon, library, miltertest, and Debian packaging all build from CMake.
Cryptography
-
Ported the daemon's crypto layer to OpenSSL 3.
-
Added Ed25519-SHA256 signing and verification per RFC 8463.
-
Removed rsa-sha1 from the signing algorithm table. (RSA-SHA1 remains available for verifying to stay compatible with legacy mail servers.
Packaging and deployment
-
Added Debian packaging targeting Debian 12 (bookworm).
-
Modernised the systemd service unit: Type=notify, no PID file, no self-daemonisation — let systemd manage the process lifecycle.
-
Added support for the modern Postfix SASL authentication macro auth_authen, keeping auth_type as a fallback for older Postfix deployments.