[OpenStreetMap] #4480: mailinglists generate DKIM warnings
OpenStreetMap
trac at openstreetmap.org
Sat Jul 14 10:47:15 BST 2012
#4480: mailinglists generate DKIM warnings
-------------------------------+--------------------------------------------
Reporter: zwiskle@… | Owner: rails-dev@…
Type: defect | Status: new
Priority: minor | Milestone:
Component: website | Version:
Keywords: |
-------------------------------+--------------------------------------------
by chance I found messages like the below in my mailserver.
I assume, the following happens:[[BR]]
- a gmail-user sends a message to the list[[BR]]
- gmail (also a bunch of others) signes the mail using DKMI (1)[[BR]]
- the mail is processed by openstreetmap/ mailman (?)[[BR]]
-- the mail-headers are manipulated by mailman[[BR]]
- my mail-server (exim4, debian) trys to validate the dkim and interprete
it as a "fail"[[BR]]
a potential solution is to tell mailman to remove dkim-headers. ( better
no dkim that a false-negative )
see e.g. https://bugs.launchpad.net/mailman/+bug/557493 for a
explenation.[[BR]]
--> REMOVE_DKIM_HEADERS = Yes
from my mailservers logfile:[[BR]]
2012-07-14 11:21:35 1SpyXf-00052O-9o DKIM: d=gmail.com s=20120113
c=relaxed/relaxed a=rsa-sha256 '''[verification failed - signature did not
verify (headers probably modified in transit)]'''[[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o <= dev-bounces at openstreetmap.org
H=shenron.openstreetmap.org [89.16.179.150] P=esmtps
X=TLS1.0:RSA_AES_256_CBC_SHA1:32 S=4884
id=CANQHZrhhF7GnygbK=yZfh6+C_YdgKT61Cyfdw+TeOecPxHCN9Q at mail.gmail.com[[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o => [someone who is on that list]
R=local_user T=maildir_home[[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o Completed
1] dkim: http://en.wikipedia.org/wiki/Dkim
--
Ticket URL: <https://trac.openstreetmap.org/ticket/4480>
OpenStreetMap <http://www.openstreetmap.org/>
OpenStreetMap is a free editable map of the whole world
More information about the rails-dev
mailing list