https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6100





--- Comment #15 from Mark Martinec <[email protected]>  2009-07-06 13:30:25 
PST ---
The situation with very old versions of Mail::DKIM is pretty much
hopeless, as RFC 4871 requires v=1 in the signature:

   v=  Version (MUST be included).  This tag defines the version of this
       specification that applies to the signature record.  It MUST have
       the value "1".  Note that verifiers must do a string comparison
       on this value; for example, "1" is not the same as "1.0".

but versions of Mail::DKIM before 0.26 insisted on v=0.5 and fail
a signature with v=1.

So, Mail::DKIM version 0.26 is the first conditionally usable version
which can deal with standard signatures.

0.26 first which allows v=1
0.27 (never published)
0.28 fails to recognize presence of a signature when a public key is
      missing or revoked, but otherwise works ok
0.29 same as 0.28
0.30 fixes 0.28/0.29 issue, but breaks on a shuffled header section
0.31, 0.32, 0.33, 3.34, 0.35, 0.36 pass all current SA tests

So the 0.31 seems to be the first really usable version for SpamAssassin.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to