Jim Fenton --> dkim-milter-discuss (2007-08-27 20:32:35 -0700):
> Sometime back, I set up a test to see whether it's possible to use a DNS
> CNAME record to point to a key record somewhere else (it is, and should
> be). But the current version of dkim-filter doesn't seem to like it;
> when I use the CNAME selector name (microwave) I get the error:
>
> verification error: invalid character (0xc0) in key data
>
> while if I use the selector it points to, it works OK.
>
> I had been under the impression, based on comments made at IETF, that
> resolvers "just did the right thing" when it came to CNAME records and
> returned the pointed-to value, but I guess all resolvers aren't created
> equal.
>
> This is dkim-milter 2.1.2 running on Fedora Core 6.
When using v2.0.2 I switched some NetBSD systems to using libar because
of problems with CNAMEs and the default (BIND) resolver. I got
dkim=permerror (verification error: key DNS reply corrupt)
With libar this works fine now. I still have to find out whaht's exactly
wrong with the BIND resolver...
HTH, Jukka
--
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
