[exim] DKIM key parsing problem?

Góra strony
Delete this message
Reply to this message
Autor: Michael J. Tubby B.Sc. MBCS G8TIC
Data:  
Dla: Exim User List
Temat: [exim] DKIM key parsing problem?
All,

Exim 4.82 on up-to-date Ubuntu 12.04 LTS server 64-bit. Using DKIM and
seeing "syntax in public key" errors from some (a few) hosts, for example:

    2014-03-31 12:53:30 CONNECT: Accepting connection from:
216.180.230.250 - not blocked by any RBL
    2014-03-31 12:53:30 HELO: Accepted HELO/EHLO m78.madmimi.com from
remote host: 216.180.230.250 (m78.madmimi.com)
    2014-03-31 12:53:30 MAIL: SPF Result=pass (m78.madmimi.com /
m78.madmimi.com [216.180.230.250])
    2014-03-31 12:53:30 MAIL: Accept from: mailman@??? host:
m78.madmimi.com [216.180.230.250]
    2014-03-31 12:53:30 RCPT: SPF Result2=pass (m78.madmimi.com /
m78.madmimi.com [216.180.230.250])
    2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM: d=madmimi.com s=jul13mimi
c=relaxed/relaxed a=rsa-sha1 [invalid - syntax error in public key record]
    2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM START:
domain=m78.madmimi.com possible_signer=madmimi.com status=invalid
(reason=pubkey_syntax)
    2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM DEFER: domain=m78.madmimi.com
    2014-03-31 12:53:30 1WUamQ-0005wP-IP H=m78.madmimi.com
[216.180.230.250] temporarily rejected DKIM : Message from
m78.madmimi.com cannot be verified


However when I check them out with ProtoDave's tool, here:

    http://www.protodave.com/tools/dkim-key-checker/


he validates it okay and returns "success":


    DNS QUERY: jul13mimi._domainkey.madmimi.com
    QUERY STATUS: Success
    TXT RECORD: jul13mimi._domainkey.madmimi.com. 300 IN TXT "k=rsa\;


p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThrbTu+nsO0xUR7Ht1mF7nAuIaSD0b6OMYxIxIxv3gFWwZj7J4M3TnJ0B78ViZHzWDrBKxBUjamToMD5NmNDsgJGE+Jl/gdkMb8bf9DLlJ69YVfr6SDPizSE8M8dOIbykeHXAev98liQK0GTs2+0i3qxhb19kbPOuq8MNDa+WwZVrH79JUUZCV6blAUGpuqZ17\\\"
\\\"p"
"l9G35v7iY21odGO5SoWHhUp5n2kvw5XEjnAOXcq6mJUdczoygqlFjgdu5I1uCOgnCTbE2/RuPy6kmWHa9I0QjxPf7pItQvK5r5cInsHw/s4iVFc1/ULX9nKzkKMN5upRNvHjwDWEAJYZpTcV0wIDAQAB"

    KEY LENGTH (BITS): 2048
    VERSION:
    KEY TYPE: rsa
    GRANULARITY:
    HASHES:
    SERVICE TYPE:
    FLAGS:
    NOTES:
    PUBLIC KEY:
    -----BEGIN PUBLIC KEY-----


MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThrbTu+nsO0xUR7Ht1mF7nAuIaSD0b6OM

YxIxIxv3gFWwZj7J4M3TnJ0B78ViZHzWDrBKxBUjamToMD5NmNDsgJGE+Jl/gdkMb8bf9DLlJ69YVf

r6SDPizSE8M8dOIbykeHXAev98liQK0GTs2+0i3qxhb19kbPOuq8MNDa+WwZVrH79JUUZCV6blAUGp

uqZ17pl9G35v7iY21odGO5SoWHhUp5n2kvw5XEjnAOXcq6mJUdczoygqlFjgdu5I1uCOgnCTbE2/Ru

Py6kmWHa9I0QjxPf7pItQvK5r5cInsHw/s4iVFc1/ULX9nKzkKMN5upRNvHjwDWEAJYZpTcV0wIDAQ
    AB
    -----END PUBLIC KEY-----



Can anyone shed any light on this?

Madmimi appear to be doing the "right thing"(tm) but Exim is failing to
parse the key?



Mike Tubby MJT4-RIPE