Re: [dkim-milter-discuss] RSA_verify: bad signature
Am 30.04.2010 18:25, schrieb Simon Bell: Hi, I am running postfix with dkim-milter. I sign out-going mail and verify incoming. When my mail server receives from google or yahoo, all seems to be fine, I get: -- dkim-filter: DKIM verification successful -- But mail from 'bluebottle' email gives me this error: -- dkim-filter: DKIM verification successful dkim-filter: s=fe0 d=bluebottle[dot]com SSL error:04077068:rsa routines:RSA_verify:bad signature -- Could someone help me understand what the error means and if it is something wrong with my server? Thank you -- ___ dkim-milter-discuss mailing list dkim-milter-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss got the same now for i.e xing.com under ubuntu lucid v2.8.3 running in only verify mode someone any ideas ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria -- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first ___ dkim-milter-discuss mailing list dkim-milter-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
Re: [dkim-milter-discuss] RSA_verify: bad signature
Robert Schetterer rob...@schetterer.org wrote: Am 30.04.2010 18:25, schrieb Simon Bell: Hi, I am running postfix with dkim-milter. I sign out-going mail and verify incoming. When my mail server receives from google or yahoo, all seems to be fine, I get: -- dkim-filter: DKIM verification successful -- But mail from 'bluebottle' email gives me this error: -- dkim-filter: DKIM verification successful dkim-filter: s=fe0 d=bluebottle[dot]com SSL error:04077068:rsa routines:RSA_verify:bad signature -- Could someone help me understand what the error means and if it is something wrong with my server? got the same now for i.e xing.com under ubuntu lucid v2.8.3 running in only verify mode someone any ideas ? For Ubuntu Lucid, I would recommend switching to opendkim. Unlike dkim-milter, this fork is actively maintained and has some significant bug fixing beyond what was ever done for dkim-milter. I've done the switch on several systems and it's pretty trivial . Scott K -- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first ___ dkim-milter-discuss mailing list dkim-milter-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
Re: [dkim-milter-discuss] RSA_verify: bad signature
-Original Message- From: Robert Schetterer [mailto:rob...@schetterer.org] Sent: Wednesday, July 07, 2010 2:23 AM To: dkim-milter-discuss@lists.sourceforge.net Subject: Re: [dkim-milter-discuss] RSA_verify: bad signature Am 30.04.2010 18:25, schrieb Simon Bell: Hi, I am running postfix with dkim-milter. I sign out-going mail and verify incoming. When my mail server receives from google or yahoo, all seems to be fine, I get: -- dkim-filter: DKIM verification successful -- But mail from 'bluebottle' email gives me this error: -- dkim-filter: DKIM verification successful dkim-filter: s=fe0 d=bluebottle[dot]com SSL error:04077068:rsa routines:RSA_verify:bad signature -- Could someone help me understand what the error means and if it is something wrong with my server? got the same now for i.e xing.com under ubuntu lucid v2.8.3 running in only verify mode someone any ideas ? No idea about xing.com, but Bluebottle definitely had a bug in its signing code that would give false negatives if the message went to two recipients. Perhaps xing.com is having a similar issue. -- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first ___ dkim-milter-discuss mailing list dkim-milter-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
Re: [dkim-milter-discuss] Bad-Sig
Thanks for for the input. I changed the C= to relaxed/simple and it still breaks. dkim=neutral (body hash did not verify) I am not a PHP shop, but I understand that there is a problem when using the mail() in php. On 7/6/10 5:29 PM, Mike Markley m...@markley.org wrote: Try using Canonicalization relaxed/simple. Simple header canonicalization often breaks in pretty common cases (headers being refolded, addresses being reformatted, spaces being added or deleted). -- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first ___ dkim-milter-discuss mailing list dkim-milter-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
