Murray S. Kucherawy skrev, on 22-08-2007 10:29: >>> Quite another thing: can someone explain how I go about validating the >>> signature of someone else's message, for example Mark's >>> http://www.ijs.si/~mark/tmp/1.msg.gz? >> Probably the simplest is to re-submit such a message into a mail stream, >> preferably through SMTP, e.g.: >> >> $ mini_sendmail [EMAIL PROTECTED] [EMAIL PROTECTED] <1.msg >> >> http://www.acme.com/software/mini_sendmail/ >> or: http://savannah.nongnu.org/projects/smtpmail > > There are also undocumented ways to compile dkim-filter to read a message > from standard input and run it through the signing/verifying process > without actually using sendmail at all. I thought I'd described them here > once before, but simply: > > - modify site.config.m4 (or dkim-filter/Makefile.m4) so that -DDEBUG is > added to the build > - recompile (sh Build -c) > - modify your input so it looks like: > > F(envelope-sender) > . > (RFC2822 headers) > (blank line) > (body) > > - remove or comment out any AutoRestart and Background lines if you're > using a configuration file > - run dkim-filter as you normally would, except don't specify -A and > always specify -f, and have the above file's contents on standard input > > You should see it make each of the milter-related calls along with their > respective arguments and return values. Toward the end, look for the > header insertions to indicate the result of the signing/verifying > operations. If you see none or if mlfi_eom() or mlfi_eoh() return > something other than an SMFIS_ACCEPT or SMFIS_CONTINUE status, there are > problems other than bad signatures and such (e.g. missing headers).
Ok, the issue of Mark's messages failing is now resolved, in so far as the same message verifies on my home machine but fails on my work RHL5 (production) machine. This is obviously a build-time question; as I wrote, I use exactly the same dkim-milter source rpm for both OS versions, same Postfix, same everything. I'd appreciate comments from anyone on this list building on Red Hat RHL5 or CentOS5 for a production environment. The crunch is, that there's obviously nothing wrong with dkim-filter/libdkim 2.1.1. I used Mark's suggestion of mini_sendmail, having first tried the debug version of dkim-filter, which crashed constantly. Many thanks to both of you for your suggestions. Best, --Tonni -- Tony Earnshaw Email: tonni at hetnet dot nl ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
