Re: dkim=permerror (0-bit key)

From: Дилян Палаузов <dilyan.palauzov_at_aegee.org>
Date: Fri, 08 Mar 2019 11:18:05 +0000

Hello,

I sent this very same raw-message to me and received:

Authentication-Results: mail.aegee.org/x28AwfBX015868; dkim=pass (1024-bit key; unprotected) header.d=cmpwn.com
header.i=_at_cmpwn.com header.a=rsa-sha256 header.s=cmpwn header.b=gJ6nVji0

I use OpenDKIM with GnuTLS, libunbound and sendmail. Try switching GnuTLS ⇔ OpenSSL and see if the problem remains.

I have received “0-bit key”, when I implemented validating ed25519-sha256 signatures in OpenDKIM using GnuTLS and the
problem was, that GnuTLS has not exported the bits length for EC before version 3.6.6 (but did the validation otherwise
correctly). So upgrading OpenSSL/GnuTLS and recompiling could help you.

Regards
  Дилян

On Thu, 2019-03-07 at 08:51 -0700, Drew DeVault wrote:
> Okay, got opendkim updated (I didn't realize develop was newer than
> master). However, the problem persists, the only difference being that
> it no longer includes "(0-bit key)".
>
> https://lists.sr.ht/~sircmpwn/sr.ht-dev/%3C20190307155010.GF2388%40cirno.localdomain%3E/raw
Received on Fri Mar 08 2019 - 11:18:34 PST

This archive was generated by hypermail 2.3.0 : Sat Mar 09 2019 - 06:00:01 PST