You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Kai Schaetzl <ma...@conactive.com> on 2005/12/12 14:31:18 UTC

DomainKeys in SA

I enabled the DomainKeys plugin way back, but didn't have much to play for 
it. Now I'm subscribed to a group at yahoogroups.com and am getting mails 
from Yahoo with:

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; 
d=yahoogroups.com; b=<domain key here>;

SA hits as:
DK_SIGNED Domain Keys: message has an unverified signature

Shouldn't it be able to verify the signature? Do I need to have an 
additional Perl module or some local certificate store?

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com




Re: DomainKeys in SA

Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
Pollywog wrote:
> On 12/12/2005 01:31 pm, Kai Schaetzl wrote:
>> I enabled the DomainKeys plugin way back, but didn't have much to play for
>> it. Now I'm subscribed to a group at yahoogroups.com and am getting mails
>> from Yahoo with:
>>
>> DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima;
>> d=yahoogroups.com; b=<domain key here>;
>>
>> SA hits as:
>> DK_SIGNED Domain Keys: message has an unverified signature
>>
>> Shouldn't it be able to verify the signature? Do I need to have an
>> additional Perl module or some local certificate store?
> 
> I can't find documentation but I found this plugin which does something 
> similar.  I have not tried it yet.
> 
> http://www.elandsys.com/resources/antispam/authresults.html

Just a word of caution... a really quick look at the the plugin reveals 
that it's configuration will be global for the same reason that the 
WhiteListSubject one was (bug 4595).  "default => {}," would need to be 
added to the config block to fix it (see the patch in bug 4595).

I didn't read the code much further, but I also noticed that it looks 
like only /half/ of the regex creation code was copied from 
WhiteListSubject.pm and is missing the wildcard translation part.


Daryl


Re: DomainKeys in SA

Posted by Pollywog <li...@shadypond.com>.
On 12/12/2005 01:31 pm, Kai Schaetzl wrote:
> I enabled the DomainKeys plugin way back, but didn't have much to play for
> it. Now I'm subscribed to a group at yahoogroups.com and am getting mails
> from Yahoo with:
>
> DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima;
> d=yahoogroups.com; b=<domain key here>;
>
> SA hits as:
> DK_SIGNED Domain Keys: message has an unverified signature
>
> Shouldn't it be able to verify the signature? Do I need to have an
> additional Perl module or some local certificate store?

I can't find documentation but I found this plugin which does something 
similar.  I have not tried it yet.

http://www.elandsys.com/resources/antispam/authresults.html