Re: Problem signing MultipleSignatures from LDAP

From: Patrick Ben Koetter <p_at_state-of-mind.de>
Date: Mon, 21 Nov 2011 21:14:57 +0100

* Murray S. Kucherawy <msk_at_cloudmark.com>:
> > -----Original Message-----
> > From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of Patrick Ben Koetter
> > Sent: Monday, November 21, 2011 11:34 AM
> > To: opendkim-users_at_lists.opendkim.org
> > Subject: Re: Problem signing MultipleSignatures from LDAP
> >
> > root_at_play:~# opendkim -Q
> > opendkim: enter data set description
> > csl:entry1[,entry2[,...]]
> > file:path
> > refile:path
> > db:path
> > dsn:<backend>://[user[:pwd]_at_][port+]host/dbase[/key=val[?...]]
> > ldapscheme://host[:port][/dn[?attrs[?scope[?filter[?exts]]]]]
> > lua:path
> > >
> > ldap://localhost/ou=people,dc=example,dc=com?DKIMIdentity,DKIMSelector
> > > ,DKIMKey,?sub?(DKIMSelector=$d)
> > opendkim: enter 'query/n' where 'n' is number of fields to request
> > > alice-2011/3
> > 'alice_at_play.state-of-mind.de'
> > 'alice-2011'
> > '-----BEGIN RSA PRIVATE KEY-----
> > [...]
>
> The first field of your KeyTable should be the signing domain name, not a full signer identity.

Now MultipleSignatures work, but I miss a signature that specifies the full
sender address. I hate to say it, but I seem to lack something fundamental
about how sender signatures should work:

  Authentication-Results: mail.state-of-mind.de (amavisd-new); dkim=pass
          header.i=_at_play.state-of-mind.de
  Authentication-Results: mail.state-of-mind.de (amavisd-new); dkim=pass
          header.i=_at_play.state-of-mind.de
  From: Alice <alice_at_play.state-of-mind.de>
  To: Patrick <p_at_state-of-mind.de>
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
          d=play.state-of-mind.de; s=play-2011; t=1321905804;
          bh=0CFBXx0zUACaZu4S4XO9OPYjmWbLyQ+A2PIWPxEjC0A=;
          h=Date:From:To:Subject;
          z=Date:=20Mon,=2021=20Nov=202011=2021:03:24=20+0100|From:=20Alice=2
          0<alice_at_play.state-of-mind.de>|To:=20Patrick=20<p_at_state-of-mind.de
>|Subject:=20foo;
          b=gZhEVfpBXfLpstw1588B8GHRRbgYL0/zM1CrUtCnyfX5Qozx3Qu6RnXj9pLvEcURP
          N5xYnUS/lxr+I3QkqhakivPhSE9GxFDHV4BhiorrbjoXRBr9mnH/pZNRl91y5xC4z2
          ORz/q3s92lbHLZ86+7mvu4WAG+GRkPmMG/NtLlQY=
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
          d=play.state-of-mind.de; s=play-2011; t=1321905804;
          bh=0CFBXx0zUACaZu4S4XO9OPYjmWbLyQ+A2PIWPxEjC0A=;
          h=Date:From:To:Subject;
          z=Date:=20Mon,=2021=20Nov=202011=2021:03:24=20+0100|From:=20Alice=2
          0<alice_at_play.state-of-mind.de>|To:=20Patrick=20<p_at_state-of-mind.de
>|Subject:=20foo;
          b=gZhEVfpBXfLpstw1588B8GHRRbgYL0/zM1CrUtCnyfX5Qozx3Qu6RnXj9pLvEcURP
          N5xYnUS/lxr+I3QkqhakivPhSE9GxFDHV4BhiorrbjoXRBr9mnH/pZNRl91y5xC4z2
          ORz/q3s92lbHLZ86+7mvu4WAG+GRkPmMG/NtLlQY=


p_at_rick

-- 
state of mind ()
http://www.state-of-mind.de
Franziskanerstraße 15      Telefon +49 89 3090 4664
81669 München              Telefax +49 89 3090 4666
Amtsgericht München        Partnerschaftsregister PR 563
Received on Mon Nov 21 2011 - 20:15:24 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:20:21 PST