Hi all,
The gnome mailman server doesn't seem to handle dkim-signed email
elegantly. From my mail logs:
Nov 2 05:49:10 server2 amavis[8746]: (08746-17) dkim: FAILED Author
signature by i=juanjomari...@yahoo.es, From: <juanjomari...@yahoo.es>,
a=rsa-sha1, c=nofws, s=s1024, d=yahoo.es,
m.list(ml:marketing-list.gnome.org), fail (message has been altered)
Nov 2 09:21:20 server2 amavis[2853]: (02853-13) dkim: FAILED Author
signature by i=@gmail.com, From: <paolobe...@gmail.com>, a=rsa-sha256,
c=relaxed/relaxed, s=gamma, d=gmail.com,
m.list(ml:gthumb-list.gnome.org), fail (message has been altered)
freedesktop has the same problem:
Nov 2 08:40:11 server2 amavis[27309]: (27309-07) dkim: FAILED Author
signature by i=@googlemail.com, From: <leoc....@googlemail.com>,
a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=googlemail.com,
m.list(ml:xorg.lists.freedesktop.org), fail (body has been altered)
I think current best practice is for mailman to strip the original
DKIM-Signature header, using mailman's "REMOVE_DKIM_HEADERS = Yes",
and/or have gnome's email servers re-sign the message. Some discussion
here: http://www.mail-archive.com/mailman-users@python.org/msg59877.html.
- Mike
_______________________________________________
gnome-infrastructure mailing list
gnome-infrastructure@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-infrastructure