DKIM issues on amavisd-new-2.8.0 (20120630)

[Andrei Brezan]

Hi Mark,

On 06/21/14 02:11, Mark Martinec wrote:
> Andrei,
>
>> I'm running amavisd-new-2.8.0 (20120630) on 9.1-RELEASE-p14 with perl
>> v5.16.3. I am using amavisd-new for mail filtering and DKIM
>> signatures. I have setup 4 domains with 4 different keys a while ago.
>> Today when I went back to that mail server and issued "amavisd
>> testkeys" I get one pass and three errors:
>>
>> TESTING#1: a._domainkey.domain1.com     => pass
>> TESTING#2: b._domainkey.domain2.com        => invalid (public key:
>> Insecure dependency in connect while running with -T switch at
>> /usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
>> /usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
>> TESTING#3: a._domainkey.domain3.com            => invalid (public key:
>> Insecure dependency in connect while running with -T switch at
>> /usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
>> /usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
>> TESTING#4: a._domainkey.domain4.com           => invalid (public key:
>> Insecure dependency in connect while running with -T switch at
>> /usr/local/lib/perl5/5.16/mach/IO/Socket.pm line 115. at
>> /usr/local/lib/perl5/site_perl/5.16/Mail/DKIM/DNS.pm line 156.)
>>
>> I haven't changed anything in DNS or keys, I rechecked the permissions
>> to the key files, all seems ok. I know I ran "testkeys" when I set
>> them up and they showed up ok. Anyone has any idea what might go wrong
>> here?
>
> Bug in Net::DNS when a returned DNS record is truncated (TC flag)
> and a fallback to a TCP query is attempted:
>
>   https://rt.cpan.org/Public/Bug/Display.html?id=96608
>

Thanks for the update. I was using p5-Net-DNS-0.75, so even a bit older 
than what you have. Updated to 0.77, still the same. Will wait to see if 
it gets fixed in a future version.

-- 
Andrei

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20140623/a1cacb59/attachment.html>