Re: AlwaysSignHeaders results in "fail"

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Mon, 18 Jun 2012 11:54:12 -0700 (PDT)

On Mon, 18 Jun 2012, Murray S. Kucherawy wrote:
> The "*" notation in SignHeaders was only added in OpenDKIM 2.3.0.
> That's probably the cause for the error you're getting. I'll
> double-check that later today.

I downloaded 2.0.1 and tried your configuration against it, and yes
indeed, the "*" feature wasn't supported back then and causes a processing
error when trying to configure libopendkim to do what you're after.

You can do it with 2.0.1, but you have to set SignHeaders to list all of
the header fields you want to sign, including yours but also including all
the other suggested ones. It's kind of a big list (see RFC6376 Section
5.4.1). Without the "*" feature, you need to replace the built-in list
with a complete list, which means you have to copy the default list by
hand.

So much has been added and/or fixed since then though that upgrading
really is a very good idea.

-MSK
Received on Mon Jun 18 2012 - 18:54:40 PST