Public bug reported:

man opendkim indicates an incorrect default value in this section:

-c canon
Selects the canonicalization method(s) to  be  used  when  signing  messages.
When verifying, the message's DKIM-Signature: header specifies the canonical‐
ization  method.   The recognized values are relaxed and simple as defined by
the DKIM specification.  The default is simple.  The value  may  include  two
different  canonicalizations  separated  by a slash ("/") character, in which
case the first will be applied to the headers and the second to the body.

In fact, the default value when installing the opendkim package without
making any modifications as set in /etc/opendkim.conf is:

Canonicalization        relaxed/simple

This may sound trivial, but the fact of having simple as default (if it
were really so) might have adverse effects on sending out to certain
*proprietary* email systems not being able to validate the DKIM
signature even though valid. Here is a short POC of this "issue" :
https://www.linkedin.com/posts/christophe-dary-85330561_opendkim-
microsoft-dkim-
activity-7425848791469166592-H3aT/?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAP0ghQB4yPo99CelJH1lOI2K6WaFNM7JVE
.

So there is no real issue at hand with the default values being correct,
but the documentation is misleading. This probably comes from upstream
here:http://www.opendkim.org/opendkim.conf.5.html but I couldn't find
how to report a correction suggestion there.

apt policy opendkim
opendkim:
  Installed: 2.11.0~beta2-9build4
  Candidate: 2.11.0~beta2-9build4
  Version table:
 *** 2.11.0~beta2-9build4 500
        500 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages
        100 /var/lib/dpkg/status

** Affects: opendkim (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: canonicalization manpage opendkim

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2141240

Title:
  Incorrect default value in man page of 'opendkim'

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/opendkim/+bug/2141240/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to