signature verification/signing problem

From: Charles Bartels <cbartels_at_yahoo-inc.com>
Date: Mon, 12 Dec 2011 08:58:27 -0800

Hi,

I'm beginning to opendkim sign email for one of my domains and can't figure out where it is going wrong. This current installation is almost identical to one I did earlier that worked fine.

The keys appear fine, I tested with "opendkim-testkey"
The DNS entry seems fine, as far as I can tell.

But emails still fail verification. Below is one of the message I received when I tested with email to <check-auth_at_verifier.port25.com>.


Any suggestions on how to proceed, or areas I might have overlooked?


-C.





----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=cbartels_at_cctw.yahoo-inc.com
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: fail (signature doesn't verify)
ID(s) verified:
Canonicalized Headers:
   to:<cbartels_at_yahoo-inc.com>,'20'<check-auth_at_verifier.port25.com>'0D''0A'
   from:cbartels_at_cctw.yahoo-inc.com'0D''0A'
   subject:Mail'20'Test6'0D''0A'
   date:Fri,'20'9'20'Dec'20'2011'20'02:48:33'20'+0800'0D''0A'
   message-id:<20111208_184833_050413.cbartels_at_cctw.yahoo-inc.com>'0D''0A'
   dkim-signature:v=1;'20'a=rsa-sha256;'20'c=relaxed/simple;'20'd=cctw.yahoo-inc.com;'20's=care;'20't=1323370113;'20'bh=fdkeB/A0FkbVP2k4J4pNPoeWH6vqBm9+b0C3OY87Cw8=;'20'h=To:From:Subject:Date:Message-ID;'20'b=

Canonicalized Body:
   Test'0D''0A'


DNS record(s):
   care._domainkey.cctw.yahoo-inc.com. 21600 IN TXT "v=DKIM1; k=rsa; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALsSejF3XAM/PJg2MclpFbsSdGMwBLauKG6WlPt2riZY1005p6JYNDUGasubp+kqY97qL7BmGGLjOMjEs0x93ZcCAwEAAQ=="

----------------------------------------------------------
Received on Mon Dec 12 2011 - 16:58:58 PST