Re: Resigning the same message

From: Ken Murchison <murch_at_andrew.cmu.edu>
Date: Wed, 26 Sep 2012 16:18:57 -0400

Andreas Schulze wrote:
> Am Mi, 26.09.2012, 17:19 schrieb Ken Murchison:
>> Now that OpenDKIM 2.7 can be used for protocols other than SMTP, namely HTTP ...
>
> Ken,
>
> could you explain the problem you solve and how you do that?
> Thanks!

I am working on an iSchedule (essentially iCalendar over HTTP)
implementation for inclusion in our Calendaring server:

http://tools.ietf.org/html/draft-desruisseaux-ischedule-01

(this draft will be updated to -02 soon which includes 1 or 2 new key
query methods)


The new functionality in OpenDKIM 2.7 that I am using for my iSchedule
implementation is the following:

- DKIM_OPTS_REQUIREDHDRS to override the requirement that a From header
be included/signed and to specify the iSchedule-specific headers that
MUST be signed

- DKIM_OPTS_OVERSIGNHDRS to oversign the Recipients headers() so no
additional headers can be added in transit

- dkim_add_querymethod() to create a list of query methods to be
included in the q= tag

- Setting a custom key lookup function with dkim_set_key_lookup() now
keeps the library from bailing out on unknown query key methods

- DKIM_CBSTAT_DEFAULT so my custom key lookup function can fallback to
using the internal dns/txt lookup function


-- 
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University
Received on Wed Sep 26 2012 - 20:19:27 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:33:36 PST