problem with 2.7.0*

From: Andreas Schulze <sca_at_andreasschulze.de>
Date: Mon, 8 Oct 2012 13:12:54 +0200

Hi

I noticed errors at one mta since I updated to 2.7.0.beta*:

Oct 1 21:38:55 dakar opendkim[25940]: 3XVv1q303Tz5vfZ: DKIM-Signature header added (s=2012, d=mout.andreasschulze.de)
Oct 2 14:06:50 dakar opendkim[25940]: 3XWJxk5RNLz5vfZ: DKIM-Signature header added (s=2012, d=mout.andreasschulze.de)
Oct 3 01:51:33 dakar opendkim[25940]: OpenDKIM Filter: mi_stop=1
Oct 3 01:51:33 dakar opendkim[25940]: OpenDKIM Filter v2.6.7 terminating with status 0, errno = 0
Oct 3 01:51:33 dakar opendkim[1276]: OpenDKIM Filter v2.7.0 starting (args: -x /etc/opendkim/opendkim.conf)
Oct 3 22:44:52 dakar opendkim[1276]: 3XX8Nz6vZDz5vqQ: dkim_eom(): internal error from libopendkim: signature generation failed (status 0, length 0)
Oct 3 23:09:49 dakar opendkim[1276]: 3XX8xn50QKz5vqQ: dkim_eom(): internal error from libopendkim: signature generation failed (status 0, length 0)

The Mail to be signed is a DSN.

# opendkim -V
opendkim: OpenDKIM Filter v2.7.0
        Compiled with OpenSSL 0.9.8o 01 Jun 2010
        SMFI_VERSION 0x1000001
        libmilter version 1.0.1
        Supported signing algorithms:
                rsa-sha1
                rsa-sha256
        Supported canonicalization algorithms:
                relaxed
                simple
        Active code options:
                USE_DB
                USE_LDAP
                USE_ODBX
                USE_XML2
                _FFR_ADSP_LISTS
                _FFR_ATPS
                _FFR_DIFFHEADERS
                _FFR_DKIM_REPUTATION
                _FFR_IDENTITY_HEADER
                _FFR_RATE_LIMIT
                _FFR_REDIRECT
                _FFR_REPUTATION
                _FFR_SENDER_MACRO
                _FFR_STATS
        libopendkim 2.7.0: atps diffheaders dkim_reputation debug

# cat opendkim.conf
Background no
BaseDirectory /var/lib/dkim/
Canonicalization relaxed/simple
Diagnostics yes
DiagnosticDirectory diagnostics/
LogWhy yes
DKIMReputationReject 30
Syslog yes
SyslogSuccess yes
TemporaryDirectory tmp/
UserID dkim
#
ChangeRootDirectory /var/lib/dkim
Mode s
Socket inet6:30045_at_[::1]
KeyTable file:/etc/opendkim/keytable
SigningTable file:/etc/opendkim/signingtable
MTA mout.andreasschulze.de
SenderMacro {mail_addr}

If I restart opendkim without ChangeRootDirectory all works fine.

This is my chroot:
# # find /var/lib/dkim/ -ls
788737 4 drwx------ 9 dkim dkim 4096 Mär 5 2012 /var/lib/dkim/
788768 4 drwx------ 2 dkim dkim 4096 Jan 7 2012 /var/lib/dkim/diagnostics
788780 4 drwx------ 2 dkim dkim 4096 Mär 5 2012 /var/lib/dkim/tmp
788772 4 drwxr-xr-x 3 root root 4096 Jan 30 2012 /var/lib/dkim/usr
788773 4 drwxr-xr-x 3 root root 4096 Jan 30 2012 /var/lib/dkim/usr/lib
788774 4 drwxr-xr-x 2 root root 4096 Okt 8 13:09 /var/lib/dkim/usr/lib/zoneinfo
786729 0 lrwxrwxrwx 1 root root 14 Okt 8 13:09 /var/lib/dkim/usr/lib/zoneinfo/localtime -> /etc/localtime
788754 4 drwxr-xr-x 2 root root 4096 Mär 1 2012 /var/lib/dkim/lib
788766 48 -rw-r--r-- 1 root root 46664 Jun 8 07:46 /var/lib/dkim/lib/libnss_nisplus.so.2
788760 44 -rw-r--r-- 1 root root 42580 Jun 8 07:46 /var/lib/dkim/lib/libnss_files-2.11.3.so
788756 48 -rw-r--r-- 1 root root 46664 Jun 8 07:46 /var/lib/dkim/lib/libnss_nisplus-2.11.3.so
788758 40 -rw-r--r-- 1 root root 38504 Jun 8 07:46 /var/lib/dkim/lib/libnss_nis.so.2
788755 40 -rw-r--r-- 1 root root 38504 Jun 8 07:46 /var/lib/dkim/lib/libnss_nis-2.11.3.so
788765 44 -rw-r--r-- 1 root root 42580 Jun 8 07:46 /var/lib/dkim/lib/libnss_files.so.2
788767 20 -rw-r--r-- 1 root root 17956 Jun 8 07:46 /var/lib/dkim/lib/libnss_hesiod.so.2
788761 32 -rw-r--r-- 1 root root 30496 Jun 8 07:46 /var/lib/dkim/lib/libnss_compat.so.2
788762 72 -rw-r--r-- 1 root root 71432 Jun 8 07:46 /var/lib/dkim/lib/libresolv.so.2
788763 20 -rw-r--r-- 1 root root 17956 Jun 8 07:46 /var/lib/dkim/lib/libnss_hesiod-2.11.3.so
788759 24 -rw-r--r-- 1 root root 22036 Jun 8 07:46 /var/lib/dkim/lib/libnss_dns-2.11.3.so
788757 32 -rw-r--r-- 1 root root 30496 Jun 8 07:46 /var/lib/dkim/lib/libnss_compat-2.11.3.so
788764 24 -rw-r--r-- 1 root root 22036 Jun 8 07:46 /var/lib/dkim/lib/libnss_dns.so.2
788738 4 drwxr-xr-x 4 root root 4096 Okt 8 13:09 /var/lib/dkim/etc
788739 4 -rw-r--r-- 1 root root 43 Sep 2 12:51 /var/lib/dkim/etc/resolv.conf
788744 4 -rw-r--r-- 1 root root 31 Okt 8 13:09 /var/lib/dkim/etc/nsswitch.conf
788752 4 drwxr-xr-x 2 root root 4096 Jan 30 2012 /var/lib/dkim/etc/unbound
788753 4 -r--r--r-- 1 root unbound 2206 Okt 7 19:49 /var/lib/dkim/etc/unbound/unbound.conf
788743 4 -rw-r--r-- 1 root root 604 Sep 2 12:51 /var/lib/dkim/etc/hosts
788746 4 drwxr-x--- 3 root dkim 4096 Okt 8 13:09 /var/lib/dkim/etc/opendkim
788749 4 drwxr-x--- 2 root dkim 4096 Jan 10 2012 /var/lib/dkim/etc/opendkim/keys
788750 4 -r--r----- 1 root dkim 891 Jan 10 2012 /var/lib/dkim/etc/opendkim/keys/2012._domainkey.mout.andreasschulze.de
788751 4 -rw-r--r-- 1 root root 51 Jan 10 2012 /var/lib/dkim/etc/opendkim/signingtable
786806 4 -r--r----- 1 root dkim 627 Okt 8 13:09 /var/lib/dkim/etc/opendkim/opendkim.conf
788748 4 -rw-r--r-- 1 root root 100 Jan 10 2012 /var/lib/dkim/etc/opendkim/keytable
786730 4 -rw-r--r-- 1 root root 2309 Mai 14 01:47 /var/lib/dkim/etc/localtime
788742 4 -rw-r--r-- 1 root root 33 Okt 8 13:09 /var/lib/dkim/etc/passwd
788741 4 -rw-r--r-- 1 root root 14 Okt 8 13:09 /var/lib/dkim/etc/group
788740 20 -rw-r--r-- 1 root root 19666 Jan 19 2011 /var/lib/dkim/etc/services
788776 4 drwxr-xr-x 4 root root 4096 Jan 30 2012 /var/lib/dkim/var
788777 4 drwxr-xr-x 2 root root 4096 Jan 30 2012 /var/lib/dkim/var/lib
788778 0 lrwxrwxrwx 1 root root 5 Jan 30 2012 /var/lib/dkim/var/lib/dkim -> ../..
788779 4 drwx------ 2 dkim dkim 4096 Jan 30 2012 /var/lib/dkim/var/core
788769 4 drwxr-xr-x 2 root root 4096 Sep 2 12:51 /var/lib/dkim/dev
788771 0 crw-r--r-- 1 root root Jan 10 2012 /var/lib/dkim/dev/random
788770 0 srw-rw-rw- 1 root root 0 Sep 2 12:51 /var/lib/dkim/dev/log

Andreas
Received on Mon Oct 08 2012 - 11:13:09 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:33:36 PST