Re: [exim] DKIM key parsing problem?

Góra strony
Delete this message
Reply to this message
Autor: Todd Lyons
Data:  
Dla: Michael J. Tubby B.Sc. MBCS G8TIC
CC: Exim User List
Temat: Re: [exim] DKIM key parsing problem?
I grepped my logs and found that from Mar 31 - Apr 4, I got these same
errors too. They have stopped as of Apr 4 22:18 UTC.

Inbound past month: 1427
Failed (3/31-4/4): 290

Whatever the problem was, they have fixed it on their end.

...Todd

On Mon, Mar 31, 2014 at 5:03 AM, Michael J. Tubby B.Sc. MBCS G8TIC
<mike.tubby@???> wrote:
> All,
>
> Exim 4.82 on up-to-date Ubuntu 12.04 LTS server 64-bit. Using DKIM and
> seeing "syntax in public key" errors from some (a few) hosts, for example:
>
>     2014-03-31 12:53:30 CONNECT: Accepting connection from:
> 216.180.230.250 - not blocked by any RBL
>     2014-03-31 12:53:30 HELO: Accepted HELO/EHLO m78.madmimi.com from
> remote host: 216.180.230.250 (m78.madmimi.com)
>     2014-03-31 12:53:30 MAIL: SPF Result=pass (m78.madmimi.com /
> m78.madmimi.com [216.180.230.250])
>     2014-03-31 12:53:30 MAIL: Accept from: mailman@??? host:
> m78.madmimi.com [216.180.230.250]
>     2014-03-31 12:53:30 RCPT: SPF Result2=pass (m78.madmimi.com /
> m78.madmimi.com [216.180.230.250])
>     2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM: d=madmimi.com s=jul13mimi
> c=relaxed/relaxed a=rsa-sha1 [invalid - syntax error in public key record]
>     2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM START:
> domain=m78.madmimi.com possible_signer=madmimi.com status=invalid
> (reason=pubkey_syntax)
>     2014-03-31 12:53:30 1WUamQ-0005wP-IP DKIM DEFER: domain=m78.madmimi.com
>     2014-03-31 12:53:30 1WUamQ-0005wP-IP H=m78.madmimi.com
> [216.180.230.250] temporarily rejected DKIM : Message from
> m78.madmimi.com cannot be verified

>
> However when I check them out with ProtoDave's tool, here:
>
>     http://www.protodave.com/tools/dkim-key-checker/

>
> he validates it okay and returns "success":
>
>
>     DNS QUERY: jul13mimi._domainkey.madmimi.com
>     QUERY STATUS: Success
>     TXT RECORD: jul13mimi._domainkey.madmimi.com. 300 IN TXT "k=rsa\;

>
> p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThrbTu+nsO0xUR7Ht1mF7nAuIaSD0b6OMYxIxIxv3gFWwZj7J4M3TnJ0B78ViZHzWDrBKxBUjamToMD5NmNDsgJGE+Jl/gdkMb8bf9DLlJ69YVfr6SDPizSE8M8dOIbykeHXAev98liQK0GTs2+0i3qxhb19kbPOuq8MNDa+WwZVrH79JUUZCV6blAUGpuqZ17\\\"
> \\\"p"
> "l9G35v7iY21odGO5SoWHhUp5n2kvw5XEjnAOXcq6mJUdczoygqlFjgdu5I1uCOgnCTbE2/RuPy6kmWHa9I0QjxPf7pItQvK5r5cInsHw/s4iVFc1/ULX9nKzkKMN5upRNvHjwDWEAJYZpTcV0wIDAQAB"
>
>     KEY LENGTH (BITS): 2048
>     VERSION:
>     KEY TYPE: rsa
>     GRANULARITY:
>     HASHES:
>     SERVICE TYPE:
>     FLAGS:
>     NOTES:
>     PUBLIC KEY:
>     -----BEGIN PUBLIC KEY-----

>
> MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThrbTu+nsO0xUR7Ht1mF7nAuIaSD0b6OM
>
> YxIxIxv3gFWwZj7J4M3TnJ0B78ViZHzWDrBKxBUjamToMD5NmNDsgJGE+Jl/gdkMb8bf9DLlJ69YVf
>
> r6SDPizSE8M8dOIbykeHXAev98liQK0GTs2+0i3qxhb19kbPOuq8MNDa+WwZVrH79JUUZCV6blAUGp
>
> uqZ17pl9G35v7iY21odGO5SoWHhUp5n2kvw5XEjnAOXcq6mJUdczoygqlFjgdu5I1uCOgnCTbE2/Ru
>
> Py6kmWHa9I0QjxPf7pItQvK5r5cInsHw/s4iVFc1/ULX9nKzkKMN5upRNvHjwDWEAJYZpTcV0wIDAQ
>     AB
>     -----END PUBLIC KEY-----

>
>
> Can anyone shed any light on this?
>
> Madmimi appear to be doing the "right thing"(tm) but Exim is failing to
> parse the key?
>
>
>
> Mike Tubby MJT4-RIPE
>
>
>
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/




--
The total budget at all receivers for solving senders' problems is $0.
If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine