OpenDKIM
OpenDKIM copied to clipboard
Headers with leading CRLF canonicalized incorrectly
If a header is wrapped immediately after the field name then it's (relaxed) canonicalized form will have a space between the field name and field value.
e.g.
List-Unsubscribe:
=?us-ascii?q?long_meaningless_value...
will canonicalize to
list-unsubscribe: =?us-ascii?q?long_meaningless_value...
instead of
list-unsubscribe:=?us-ascii?q?long_meaningless_value...
which causes validation to fail.
The RFC says that any whitespace after the colon should be deleted.
This and other bugs are fixed on the develop branch.
FYI: The emails sent from twitter.com have this bug.
Use the code from the develop branch.
I've already used development branch.
twitter.com sends bad signature (using old OpenDKIM?). Then my MTA gets "dkim=fail". I reported this failure to twitter.com but rejected.
What do you expect to happen, when you write here?
What I would like is:
- I hope this bugfix is released as stable early.
- Please announce broadly to stop using the buggy version.
I asked the author of the software to release a new version of OpenDKIM, where all known problems are fixed. You can write him, too.
We obviously can't compel Twitter to fix their DKIM implementation, but I'll cut a release of this shortly in case that's the blocker.