I was planning on deploying dkim-milter but I noticed that after 
compiling and installing I got the error below on the reply from 
[EMAIL PROTECTED]  After searches on the subject I gather that older 
versions of OpenSSL do not support rsa-sha256.  Is this correct?

(verification error: signature algorithm invalid) [EMAIL PROTECTED]

[EMAIL PROTECTED] ~]$ dkim-filter -V
dkim-filter: Sendmail DKIM Filter v2.1.1
        Compiled with OpenSSL 0.9.7a Feb 19 2003
        Supported signing algorithms:
                rsa-sha1
        Supported canonicalization algorithms:
                relaxed
                simple

I am just surprised that the latest version of CentOS5/RHEL5 would be 
too outdated to use [EMAIL PROTECTED]  I am pretty much stuck with 
the default openssl versions for support reasons so I am wondering how 
wide spread sha256 is used.  I know that sha1 is getting outdated and 
has issues that make it easier to crack but it seems like a bad idea to 
push an algorithm that some of the well known OS vendors do not support 
by default... especially if we want dkim-milter to get used by as many 
mail servers as we can.

Or did I do something wrong and sha256 is supported with openssl 0.9.7a?

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to