Re: feature request for a better log message than "unknown cause"

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Tue, 29 Jun 2010 10:14:02 -0700 (PDT)

On Tue, 29 Jun 2010, Daniel Black wrote:
> Quick feature request for a better log message than "unknown cause"

That's caused when the library returned DKIM_STAT_CANTVRFY without setting
an error string first by calling dkim_error().

> From the email the Authenticated Results shows the cause of the error:
>
> Authentication-Results: mail.apex.net.au; dkim=permerror
> (verification error: empty key record; insecure key)
> header.i=_at_apex.net.au; dkim-adsp=none (insecure policy)

Are you sure these are from the same message? In that case not only was
dkim_error() called with the "empty key record" string, but the return
value there is actually DKIM_STAT_SYNTAX which follows a different code
path.

> Received: from localhost (unknown [127.0.0.1])
> by filter-sub-01.as-ip.net.au (mx2.OVEE.com.au) with ESMTP id 0FE76A40086
> for <XXXXXXXXX_at_apex.net.au>; Tue, 29 Jun 2010 08:34:29 +1000 (EST)
> Received: from secure-web-01.corp.au.ovee.com.au (unknown [202.55.156.113])
> by mx2.ovee.com.au (mx2.OVEE.com.au) with ESMTP id 6475BA40087
> for <XXXXXXXXX_at_apex.net.au>; Tue, 29 Jun 2010 08:34:25 +1000 (EST)

These job IDs don't match what's in your log:

> Jun 29 08:37:12 arnold postfix/smtpd[8262]: F2BE139013B: client=mx2.ovee.com.au[203.30.98.140]
> Jun 29 08:37:13 arnold postfix/cleanup[8174]: F2BE139013B: message-id=<a21e58a3a9104833a21dc3ecc4785867_at_cosmos.apex.net.au>
> Jun 29 08:37:13 arnold opendkim[14796]: F2BE139013B: signature verification failed: unknown cause
> Jun 29 08:37:13 arnold postfix/qmgr[15084]: F2BE139013B: from=<www_at_secure-web-01.corp.au.ovee.com.au>, size=689170, nrcpt=1 (queue active)
> Jun 29 08:37:13 arnold postfix/local[7783]: F2BE139013B: to=<XXXXXXXXXXXX_at_apex.net.au>, relay=local, delay=0.94, delays=0.69/0.12/0/0.13, dsn=2.0.0, status=sent (delivered to command: procmail -a "$EXTENSION")
> Jun 29 08:37:13 arnold postfix/qmgr[15084]: F2BE139013B: removed

Some other message caused this. An example would help to find the code
path by which DKIM_STAT_CANTVRFY is returned but no error code is
provided. It would be pretty unusual; a cursory search through
libopendkim/dkim.c found that most such cases do set an error code and/or
error string.
Received on Tue Jun 29 2010 - 17:49:13 PST