Re: DKIM temperror's from yahoo

From: Richard Rognlie <rrognlie_at_gamerz.net>
Date: Thu, 2 Sep 2010 11:30:40 -0400

I'm seeing multiple keys returned as well

;; QUESTION SECTION:
;062010._domainkey.fheg.follett.com. IN TXT

;; ANSWER SECTION:
062010._domainkey.fheg.follett.com. 86393 IN TXT "g=*\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCz/7rw/BrNjHAB4S5R8EX0fEd6c8Gr36bdsogza5AHefnCSFI2cC2UpE9ySDHO0gh9P2D81kR64NE0Xwtce+15yRxyMT+ZVwjAmf8cXXHcYcFIQHB0fFezY+15FzbeqpPZWBZy7YkOz0wxulSK9KpzGefpeipPuXEgrW3rqyEQJwIDAQAB\""

062010._domainkey.fheg.follett.com. 86393 IN TXT "k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6uR/xej8OnYH09R8GjxZVygaUrT/xWOqyGE10ELxOe5biYWE9IZexZm53NuRXyLZHJzSQZA3UIZcj3XZJ/aOAOhDX3Tov0+Vkj/JG6NY6GUv4wRB6Cdd42bzOd2i3NEJVL54V5+n+yfWy9her9bOohEr0U5jmg6jQfKKMjg2N+QIDAQAB"

Same key, but one has g=*;

On Thu, Sep 02, 2010 at 09:59:13AM -0500, Baird, Josh wrote:
> I'm hoping someone here has some experience with sending DKIM signed
> messages to Yahoo. We are successfully signing our outbound emails, and
> Gmail is accepting the signature:
>
> Authentication-Results: mx.google.com; spf=pass (google.com: domain of
> FollettTextRental_at_fheg.follett.com designates 12.171.92.143 as permitted
> sender) smtp.mail=FollettTextRental_at_fheg.follett.com; dkim=pass
> header.i=_at_fheg.follett.com
>
> However, Yahoo is saying the DKIM authentication is failing with a
> "temperror:"
>
> Authentication-Results: mta1098.mail.mud.yahoo.com
> from=fheg.follett.com; domainkeys=neutral (no sig);
> from=fheg.follett.com; dkim=temperror (multiple keys)
>
> Has anyone seen this error? We are only publishing one key in DNS, so
> I'm not sure what "Multiple Keys" is referring to. I can't seem to find
> any information about this on the web.
>
> Any ideas would be greatly appreciated.
>
> Here are my DKIM and DKIM Policy records published in DNS:
>
> 062010._domainkey IN TXT "k=rsa\;
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6uR/xej8OnYH09R8GjxZVygaUrT/xWO
> qyGE10ELxOe5biYWE9IZexZm53NuRXyLZHJzSQZA3UIZcj3XZJ/aOAOhDX3Tov0+Vkj/JG6N
> Y6GUv4wRB6Cdd42bzOd2i3NEJVL54V5+n+yfWy9her9bOohEr0U5jmg6jQfKKMjg2N+QIDAQ
> AB" ;New DKIM Record
>
> _domainkey IN TXT "t=y; o=~;" ;DKIM Policy
> Record (not all emails are signed)
>
> Thanks,
>
> Josh
>
>

-- 
 /  \__  | Richard Rognlie / Sendmail Ninja / Gamerz.NET Lackey
 \__/  \ | http://www.gamerz.net/~rrognlie    <rrognlie at gamerz.net>
 /  \__/ | Creator of pbmserv_at_gamerz.net
 \__/    |                Helping reduce world productivity since 1994
Received on Thu Sep 02 2010 - 15:30:56 PST

This archive was generated by hypermail 2.2.0+W3C-0.50 : Thu Sep 02 2010 - 20:50:00 PST