[arch-general] DKIM debuggage (Was: Deletion of old account)

[Gabriel Margiani]

> > i think i confused noone. you (florian pelz) have invalid DKIM
> > signatures (domain pelzflorian.de), while florian pritz has correct
> > signatures (domain xinu.at).

It looks like the problem has something to do with the
"canonicalization" scheme used (c=... in the dkim-signature)
Florian Pritz is using relaxed/simple and it passes, Florian
Pelzs messages fail using simple/simple, the same is true for
Georg Schlisio, while Lukas Rose (quit early in the thread)
passes using relaxed/relaxed.

>From this I'd think there's a problem with header or body being
slightly modified somewhere on the way (added line breaks or
something. I think, we've relaxed/relaxed set, so let's see if it
passes)

Ralf Mardorf has DomainKey-Signature with c=nofws, seems to be
something else and passes.

Giovanni Santini uses dkim with relaxed/relaxed plus some
X-Google-DKIM-Signature - and this combination fails with "Body
has been altered" (as opposed to "Message has been altered" for
the other fails) in amavis.

hope that is somehow useful,

regards,
Gabriel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP Digital Signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20160524/de548ad6/attachment.asc>