[exim-dev] [Bug 2706] New: DKIM and Received headers

https://bugs.exim.org/show_bug.cgi?id=2706

            Bug ID: 2706
           Summary: DKIM and Received headers
           Product: Exim
           Version: 4.94
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: DKIM
          Assignee: tom@???
          Reporter: bd4@???
                CC: exim-dev@???

When Exim is asked to sign "Received:" headers (via dkim_sign_headers
contining "+Received") it produces a signature, which always passes
exim's verification check, but does not pass Postfix and SpamAssassin.

For Exim confirmation is visible from log file entry "DKIM: d=...
s=... c=relaxed/relaxed a=rsa-sha256 b=2048 [verification succeeded]"
and ${authresults{}} expansion string.

For Postix I rely on https://dkimvalidator.com/ public service,
for SpamAssassin I have my own installaton and can compare with
dkimvalidator.com, both show identical results.
I also tried https://www.appmaildev.com/en/dkimfile, it agrees with
dkimvalidator.com.

If "+Received" is removed from dkim_sign_headers, all mentioned checkers
report good result.

--
You are receiving this mail because:
You are on the CC list for the bug.