At 02:12 05-01-2008, Andrew Haveland-Robinson wrote: >No, not relying on gmail, just noticed it didn't verify. Perhaps signed >messages should be delimited to protect against appendices, and made clear >where the authentication begins and ends? >Like the OSI 7 layer model, can't dkim not make use of wrappers and >encapsulation to preserve integrity during transmission/forwarding?
There's an option (BodyLengths ) which will include the body length tag when signing a message. This allows the message to pass verification if it goes through a mailing list which append a footer. DKIM-signed messages are generally not affected by forwarding as the signed headers and body content is not modified by forwarders. >I used a couple of dkimi test addresses... my test messages did verify ok, >however my verification of the reply from [EMAIL PROTECTED] gave: >Authentication-Results: gaia.haveland.com; dkim=permerror (verification >error: signature timestamp in the future) [EMAIL PROTECTED] > >My ntp source is a nuclear physics research institute, and I'm sure my time >is accurate so I think someone ought to check the machine. I would recommend using ntp if you are using DKIM as it prevents verification failures due to an incorrect timestamp as in the above example. >dkim-filter: Sendmail DKIM Filter v2.4.1 > Compiled with OpenSSL 0.9.8b 04 May 2006 > Supported signing algorithms: > rsa-sha1 > rsa-sha256 > Supported canonicalization algorithms: > relaxed > simple You have the correct version of OpenSSL. >I will try and get it to do a core dump and get a trace. That's the next step if you are still getting a crash. See Murray's message about setting confOPTIMIZE in site.config.m4 before compiling dkim-milter. The trace will provide us with some debugging information to identify the cause of the crash in your environment. Regards, -sm ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
