Hi all I set up dkim-milter 2.6.0 on a Linux machine using Postfix 2.3.8. I was working according to various documentation I have found on the net. As a first step I initiated signing of mails and published the relevant public keys in DNS. I sent tests to dkim-test (at) testing.dkim.org. As result I got a message back indicating "pass, sig verified". Therefore, I suppose that I set up everything as it should be.
As a second step, I tried to verify incoming mails by using: smtp inet n - - - - smtpd -o receive_override_options=no_address_mappings -o smtpd_milters=inet:localhost:8891 -o milter_macro_daemon_name=VERIFYING -o milter_default_action=tempfail -o milter_protocol=3 Port 8891 is used by dkim-filter. So far, verification works: - If a mail comes in with DKIM-Signature, a Authentication-Results header with dkim=pass will be added. I configured dkim-filter to write a statistics file; the number of passes increases when I look at it with dkim-stats. However, I have (yet) only tested by sending mail to myself because so far no remote host has sent me a mail with DKIM-Signature. - If I alter the contents of a mail and reinject the mail, dkim-filter will correctly report the signature verification has been failed. At first sight, everything looks well. However, there's a log message which is a bit confusing: Jan 3 23:09:26 valmar dkim-filter[952]: 3C9D8342EEEF SSL error:04067069:rsa routines:RSA_EAY_PUBLIC_DECRYPT:pkcs1 padding too short (On successful verification, this is the _only_ logged message. In case of failed verification, a log line indicating "bad signature data" follows.) In the mailing list archives, I have found some postings indicating the same error message. These postings stated that "padding too short" indicates that signature verification did not work properly. However, in my case signature verification apparently does seem to work and still I get that message. Any thoughts about that? Is there something misconfigured? Thanks, -thomas. ------------------------------------------------------------------------------ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
