On Fri, 11 Apr 2008, Hadar Pedhazur wrote:
> There is one difference, the z tag headers show a "space" on the second 
> line of the "CC" header, whereas the original one appears to either be a 
> TAB, or more spaces.

That's enough to invalidate the signature if you're using "simple" header 
verification.

> I just tested again, and even though the sendmail test generates a bad 
> signature line in the log, and a failed verification header, it does 
> _not_ create a file in /tmp. Only the failed SSL line seems to trigger 
> the debug file!

The diagnostics file is only saved if during verification libdkim reported 
that the signature was bad (signature failed to verify, or the body hash 
didn't match the body contents).  For other failures, no report is 
generated.

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to