Your message dated Wed, 09 Jan 2013 02:48:13 +0000
with message-id <[email protected]>
and subject line Bug#695145: fixed in opendkim 2.6.8-4
has caused the Debian Bug report #695145,
regarding opendkim: DKIM signature verification is failing
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
695145: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695145
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: opendkim
Version: 2.6.8-3
Severity: important

Hello,

While setting up opendkim on my system I've noticed the following during
the signature verification:

Dec  4 16:37:34 anna opendkim[17205]: 20330159F64: mail-ye0-f181.google.com 
[209.85.213.181] not internal 
Dec  4 16:37:34 anna opendkim[17205]: 20330159F64: not authenticated 
Dec  4 16:37:34 anna opendkim[17205]: 20330159F64: signature=Vu82MmQr 
domain=gmail.com selector=gmail.com result="no signature error" 

The selector mentionned in the syslog record is wrong, and the verification
result is always "no signature error"...

The signature which was being verified is the following:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=kZlhbDnnJhBXoM6pk+S8McermM7wB9qhzhKe02y84bU=;
        b=Vu82MmQrn3TOlTGNwW+UWR3cRHoklnKnP0yG4PIN6FDE3BxTN9V+dX1oTk8D2i+Ykm
         I3fviG7SIZ/Ze+zVSistdUamvo/tV7mpHob/JJuHvojo5q6YTWGWoAkMCz7sQd5wC+IM
         27ThG+WqN057DvCjQne3ILa4CgpyfhugfrMfypi6lkYoyECpUboETY4e9PCpkzAcjuKa
         Z0XwP+8GGZBan/lOkaft4z7GyWi7guhpM/W8UeT1eack5zWT0+EiSLwj4rpNFTZTOYE+
         /6pbk8Yf/zlx1X1m86MYJNZf0L6c+OAXuHlb0tdbG7UnCBSD4twVQOKBZWAPohxmn+Hl
         FDuQ==

You can see the selector is not "gmail.com". This is happening
with any domain, not just gmail.com.

Can you please have a look ? Is this a known issue ? Am I missing
something ?

Thank you.

-- 
Julien Lesaint



-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.6
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages opendkim depends on:
ii  adduser         3.113+nmu3
ii  libc6           2.13-37
ii  libdb5.1        5.1.29-5
ii  libldap-2.4-2   2.4.31-1
ii  liblua5.1-0     5.1.5-4
ii  libmilter1.0.1  8.14.4-2.1
ii  libopendkim7    2.6.8-3
ii  libssl1.0.0     1.0.1c-4
ii  libunbound2     1.4.18-1
ii  libvbr2         2.6.8-3
ii  lsb-base        4.1+Debian9

opendkim recommends no packages.

Versions of packages opendkim suggests:
ii  opendkim-tools  2.6.8-3

-- Configuration Files:
/etc/opendkim.conf changed:
Syslog                  yes
UMask                   002
Canonicalization        relaxed/relaxed
SubDomains              yes
OversignHeaders         From
DisableADSP             yes
InternalHosts           file:/etc/postfix/dkim/InternalHosts
LogResults              yes
LogWhy                  yes
SignHeaders             
mime-version,sender,in-reply-to,references,from,date,subject,to,content-type
Socket                  inet:[email protected]
SenderHeaders           Sender,From
KeyTable                file:/etc/postfix/dkim/KeyTable
SigningTable            refile:/etc/postfix/dkim/SigningTable


-- no debconf information

--- End Message ---
--- Begin Message ---
Source: opendkim
Source-Version: 2.6.8-4

We believe that the bug you reported is fixed in the latest version of
opendkim, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Scott Kitterman <[email protected]> (supplier of updated opendkim package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 08 Jan 2013 02:44:28 -0500
Source: opendkim
Binary: opendkim opendkim-tools libopendkim7 libopendkim-dev libvbr2 libvbr-dev
Architecture: source i386
Version: 2.6.8-4
Distribution: unstable
Urgency: low
Maintainer: Mike Markley <[email protected]>
Changed-By: Scott Kitterman <[email protected]>
Description: 
 libopendkim-dev - Headers and development libraries for the OpenDKIM library
 libopendkim7 - Library for signing and verifying DomainKeys Identified Mail 
sign
 libvbr-dev - Headers and development libraries for the OpenDKIM VBR library
 libvbr2    - Library for RFC 5518 Vouch By Reference (VBR)
 opendkim   - Milter implementation of DomainKeys Identified Mail
 opendkim-tools - Set of command line tools for OpenDKIM
Closes: 695145
Changes: 
 opendkim (2.6.8-4) unstable; urgency=low
 .
   * Backport fix from upstream to log the correct message selector
     (Closes: #695145) (fix was included as part of the just released 2.7.4)
Checksums-Sha1: 
 1c245e4f342b6658e4e313c5d32c33c22cd74450 1397 opendkim_2.6.8-4.dsc
 80c4e37d7afadd44fe08743313415cb0e8b3d96f 13366 opendkim_2.6.8-4.diff.gz
 dde4f8e809e67224946ed6725901d1120067d55c 178098 opendkim_2.6.8-4_i386.deb
 df05232cd465b9fa8c73a84ed7bab2938422a3fa 167212 opendkim-tools_2.6.8-4_i386.deb
 1c33098a75224e26624542c1030d63c4bfdbc430 87066 libopendkim7_2.6.8-4_i386.deb
 a709dfab5e551ff78b04ae56712cf141953a2c9e 175270 
libopendkim-dev_2.6.8-4_i386.deb
 c8ac82cbaf4cccd41f6b93267db4d7a92b73226b 35470 libvbr2_2.6.8-4_i386.deb
 807914018a604b355a8cd66ff0704807d9781a85 39194 libvbr-dev_2.6.8-4_i386.deb
Checksums-Sha256: 
 d9890ae9e2a412a26f04ea5eff9343954cf0410b6d3c1f42ed87105671e69eb2 1397 
opendkim_2.6.8-4.dsc
 1facdfa2e162e67a0b08f905e228fa54c8b3a35ac789030d415553bfd86406ac 13366 
opendkim_2.6.8-4.diff.gz
 c0fe6983f9777a0f69cd8bbd4a8593dc867c72504a0a6753a43794e595eb5497 178098 
opendkim_2.6.8-4_i386.deb
 255e973191258d3b3d513da82c84251db558101293bf8e7b50dc63aaf4e506ed 167212 
opendkim-tools_2.6.8-4_i386.deb
 531ed6664e536612d31522a7cd501b528a44bf1a522f2a40e5c2b3509c91a1d3 87066 
libopendkim7_2.6.8-4_i386.deb
 dc9a5b5d148bc75333563cdbe5a1d562569a513a782f04864dae887ed2397c59 175270 
libopendkim-dev_2.6.8-4_i386.deb
 cf7bded160dd1c53586ad36587729e56fdb82b402d1aa68c88536f8f55be0afa 35470 
libvbr2_2.6.8-4_i386.deb
 2aea6e49cb211f12925437caacbd3435c7f15630eca19cffdac923d493b54e8f 39194 
libvbr-dev_2.6.8-4_i386.deb
Files: 
 30949e7ad59a442053dce55aefcc5226 1397 mail extra opendkim_2.6.8-4.dsc
 b742e0aeb4afc7eb107a923a5e80d54a 13366 mail extra opendkim_2.6.8-4.diff.gz
 f7a127fac1ef6e39d26245d96d83e130 178098 mail extra opendkim_2.6.8-4_i386.deb
 792503287b8dd7d09d9d741e19341817 167212 mail extra 
opendkim-tools_2.6.8-4_i386.deb
 81b70b3e11b0cdd968d7228cc25fc531 87066 libs extra libopendkim7_2.6.8-4_i386.deb
 611f26d94417f9b88f0169296b9d2816 175270 libdevel extra 
libopendkim-dev_2.6.8-4_i386.deb
 f2a8a668cfcfa2e09d24f1dc176732ad 35470 libs extra libvbr2_2.6.8-4_i386.deb
 4ce32faaeca6f017e54f44ceb3a479c9 39194 libdevel extra 
libvbr-dev_2.6.8-4_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAlDs14gACgkQHajaM93NaGro1wCePIRRfp4hn2lmK9I88ghrqHqU
tjsAoILDOzRSCEtF3iAwDV/KmVuEontY
=RTbN
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to