<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">Hi Mark,<br>
<br>
</font>
<div class="moz-cite-prefix">On 06/21/14 02:11, Mark Martinec wrote:<br>
</div>
<blockquote
cite="mid:da35b01af3c695199f1dfc1862b1d007@mailbox.ijs.si"
type="cite">Andrei,
<br>
<br>
<blockquote type="cite">I'm running amavisd-new-2.8.0 (20120630)
on 9.1-RELEASE-p14 with perl
<br>
v5.16.3. I am using amavisd-new for mail filtering and DKIM
<br>
signatures. I have setup 4 domains with 4 different keys a while
ago.
<br>
Today when I went back to that mail server and issued "amavisd
<br>
testkeys" I get one pass and three errors:
<br>
<br>
TESTING#1: a._domainkey.domain1.com => pass
<br>
TESTING#2: b._domainkey.domain2.com => invalid (public
key:
<br>
Insecure dependency in connect while running with -T switch at
<br>
/usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
<br>
/usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
<br>
TESTING#3: a._domainkey.domain3.com => invalid
(public key:
<br>
Insecure dependency in connect while running with -T switch at
<br>
/usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
<br>
/usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
<br>
TESTING#4: a._domainkey.domain4.com => invalid
(public key:
<br>
Insecure dependency in connect while running with -T switch at
<br>
/usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
<br>
/usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
<br>
<br>
I haven't changed anything in DNS or keys, I rechecked the
permissions
<br>
to the key files, all seems ok. I know I ran "testkeys" when I
set
<br>
them up and they showed up ok. Anyone has any idea what might go
wrong
<br>
here?
<br>
</blockquote>
<br>
Bug in Net::DNS when a returned DNS record is truncated (TC flag)
<br>
and a fallback to a TCP query is attempted:
<br>
<br>
<a class="moz-txt-link-freetext" href="https://rt.cpan.org/Public/Bug/Display.html?id=96608">https://rt.cpan.org/Public/Bug/Display.html?id=96608</a>
<br>
<br>
</blockquote>
<br>
Thanks for the update. I was using p5-Net-DNS-0.75, so even a bit
older than what you have. Updated to 0.77, still the same. Will wait
to see if it gets fixed in a future version.<br>
<pre class="moz-signature" cols="72">--
Andrei
</pre>
</body>
</html>