Package: opendkim Version: 2.0.1+dfsg-1 Severity: normal
run opendkim-genkey: look at default.txt. This has a deprecated g=* default._domainkey IN TXT "v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUS6bO3Gk/xAHIlOOxYVAh+tXqdxkPDqQfXurDryvMlfe3m9Nl9CddAmRPpR/KckalaoE0RhRDL6WyU vxN7MwLA7q1p+bMmctx4OxTaG87EIFkw3Jy0oBCV6hJoy5WY1NGhiko8ZjwAD1YwoFi/4Oqf7p+Yiam9gcnNxhmRTc7TwIDAQAB" ; ----- DKIM default for example.com >From rfc6376 secionn C.2 (https://tools.ietf.org/html/rfc6376#appendix-C.2) Although the "g=" tag has been deprecated in this version of the DKIM specification (and thus MUST now be ignored), Signers are advised not to include the "g=" tag in key records because some [RFC4871]- compliant Verifiers will be in use for a considerable period to come. -- System Information: Debian Release: 6.0.6 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32.46-xenU (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages opendkim depends on: ii adduser 3.112+nmu2 add and remove users and groups ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libdb4.8 4.8.30-2 Berkeley v4.8 Database Libraries [ ii libldap-2.4-2 2.4.23-7.2 OpenLDAP libraries ii liblua5.1-0 5.1.4-5 Simple, extensible, embeddable pro ii libmilter1.0.1 8.14.3-9.4 Sendmail Mail Filter API (Milter) ii libopendkim1 2.0.1+dfsg-1 Library for signing and verifying ii libssl0.9.8 0.9.8o-4squeeze13 SSL shared libraries ii libunbound2 1.4.6-1+squeeze2 library implementing DNS resolutio opendkim recommends no packages. opendkim suggests no packages. -- Configuration Files: /etc/opendkim.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
