problem with DKIM and big messages

Johannes Feigl johannesfeigl at gmail.com
Wed Oct 4 14:41:24 CEST 2017


hello,

on my debian system with amavisd-new-2.10.1 i found a problem with
DKIM-verify and big messages.

if there is a standard mail it works, but when it got an attachment it
fails.

the debug message looks like this:

Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: eval: From 2nd level
domain: gmail.com, EnvelopeFrom 2nd level domain: gmail.com
Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: dkim: performing
public key lookup and signature verification
Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: dkim: DKIM, i=@
gmail.com, d=gmail.com, s=20161025, a=rsa-sha256, c=relaxed/relaxed, fail,
matches author domain
Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: dkim: signature
verification result: FAIL (BODY HAS BEEN ALTERED)
Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: dkim: adsp ignored,
message was truncated, invalid author domain signature
Oct  4 10:57:06 mail amavis[8781]: (08781-02) SA dbg: dkim: adsp result: -
(truncated, ignored), author domain 'gmail.com'

FAIL (BODY HAS BEEN ALTERED)

when i run spamassassin manually on the eml-file there is no problem
i finally found, that MAIL::DKIM is NOT getting the hole message.

whe i alter /usr/share/perl5/Mail/SpamAssassin/Plugin/DKIM.pm,
about lile 771 (in my case), there is "my $str = $pms->{msg}->get_pristine;
... $verifier->PRINT($str);"

when i simply save the content of $str to a file, then i see that it has
been cutted.

this seams to be the problem.

do you have any idea how to prevent this?

BR Johannes
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20171004/16880a40/attachment.html>


More information about the amavis-users mailing list