Package: opendkim
Version: 2.0.1+dfsg-1
Severity: normal


run opendkim-genkey:

look at default.txt. This has a deprecated g=*

default._domainkey IN TXT "v=DKIM1; g=*; k=rsa; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUS6bO3Gk/xAHIlOOxYVAh+tXqdxkPDqQfXurDryvMlfe3m9Nl9CddAmRPpR/KckalaoE0RhRDL6WyU
vxN7MwLA7q1p+bMmctx4OxTaG87EIFkw3Jy0oBCV6hJoy5WY1NGhiko8ZjwAD1YwoFi/4Oqf7p+Yiam9gcnNxhmRTc7TwIDAQAB"
 ; ----- DKIM default for example.com

>From rfc6376 secionn C.2 (https://tools.ietf.org/html/rfc6376#appendix-C.2)

  Although the "g=" tag has been deprecated in this version of the DKIM
   specification (and thus MUST now be ignored), Signers are advised not
   to include the "g=" tag in key records because some [RFC4871]-
   compliant Verifiers will be in use for a considerable period to come.

-- System Information:
Debian Release: 6.0.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32.46-xenU (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages opendkim depends on:
ii  adduser                3.112+nmu2        add and remove users and groups
ii  libc6                  2.11.3-4          Embedded GNU C Library: Shared lib
ii  libdb4.8               4.8.30-2          Berkeley v4.8 Database Libraries [
ii  libldap-2.4-2          2.4.23-7.2        OpenLDAP libraries
ii  liblua5.1-0            5.1.4-5           Simple, extensible, embeddable pro
ii  libmilter1.0.1         8.14.3-9.4        Sendmail Mail Filter API (Milter)
ii  libopendkim1           2.0.1+dfsg-1      Library for signing and verifying 
ii  libssl0.9.8            0.9.8o-4squeeze13 SSL shared libraries
ii  libunbound2            1.4.6-1+squeeze2  library implementing DNS resolutio

opendkim recommends no packages.

opendkim suggests no packages.

-- Configuration Files:
/etc/opendkim.conf changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to