Question

难以记录opendkim签名以解决为什么txt消息被正确签名但html消息未在Centos 7上的phplist设置中正确签名.phplist的开发人员要求提供日志以帮助排除故障，但我可以＆＃39 ;生成它们。

这是我的/etc/opendkim.conf。示例日志输出

AutoRestart             Yes
AutoRestartRate         10/1h
LogWhy                  Yes
Syslog                  Yes
SyslogSuccess           Yes
Mode                    sv
Canonicalization        relaxed/simple
ExternalIgnoreList  refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrutedHosts
KeyTable                refile:/etc/opendkim/KeyTable
SigningTable            refile:/etc/opendkim/SigningTable
SignatureAlgorithm  rsa-sha256
Socket                  inet:8891@localhost
PidFile                 /var/run/opendkim/opendkim.pid
UMask                   022
UserID                  opendkim:opendkim
TemporaryDirectory  /var/tmp

以下是maillog文件。没有签署出站电子邮件的迹象：

Oct 18 16:04:40 mail postfix/pickup[26230]: C65F13F7A3: uid=700 from=<blablabla@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/cleanup[26545]: C65F13F7A3: message-id=<f4f45a6587f55f03181cc72f612ff0b3@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/qmgr[13116]: C65F13F7A3: from=<blablabla@wonderfulrama.com>, size=8817, nrcpt=1 (queue active)
Oct 18 16:04:40 mail postfix/pickup[26230]: D9E103F2D0: uid=700 from=<blablabla@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/cleanup[26545]: D9E103F2D0: message-id=<478a3610c0d3afb3a7a12d11a57a8728@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/qmgr[13116]: D9E103F2D0: from=<blablabla@wonderfulrama.com>, size=2628, nrcpt=1 (queue active)
Oct 18 16:04:41 mail postfix/smtp[26556]: C65F13F7A3: to=<blanketyblank@gmail.com>, relay=gmail-smtp-in.l.google.com[209.85.xxx,xxx]:25, delay=0.96, delays=0.11/0.06/0.35/0.44, dsn=2.0.0, status=sent (250 2.0.0 OK 1476806682 t1si21324804qke.238 - gsmtp)
Oct 18 16:04:41 mail postfix/qmgr[13116]: C65F13F7A3: removed
Oct 18 16:04:41 mail postfix/smtp[26557]: D9E103F2D0: to=<blanketyblank@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.xxx,xxx]:25, delay=0.97, delays=0.09/0.06/0.3/0.52, dsn=2.0.0, status=sent (250 2.0.0 OK 1476806682 e4si21333125qkc.144 - gsmtp)
Oct 18 16:04:41 mail postfix/qmgr[13116]: D9E103F2D0: removed

然而，邮件标题显示标志：

这是经过适当身份验证的出站txt-only消息的标志：

这是来自出站html消息的电子邮件标题失败的标志：

Authentication-Results: mx.google.com;
       dkim=neutral (body hash did not verify) header.i=@wonderfulrama.com;
       spf=pass (google.com: domain of blablabla@wonderfulrama.com designates xxx.xxx.xxx.xxx as permitted sender) smtp.mailfrom=blablabla@wonderfulrama.com
Received: by mail.wonderfulrama.com (Postfix, from userid 700)
    id C65F13F7A3; Tue, 18 Oct 2016 16:04:40 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wonderfulrama.com;
    s=default; t=1476806680;
    bh=OU///H7E0TINCIYEiNDAPlxKESdq02278nItJZ7WOZM=;
    h=To:Subject:Date:From:List-Help:List-Unsubscribe:List-Subscribe:
     List-Owner;
    b=o3a9JvADtFZ0LQFqwB9SAT7XSMbqX4J6JSbaRaq617cuvwNlnGXz/sOzyvvgOQc2i
     XiNMZqWqMK0p/3+f52amFc7FLYmNkZ008dhtbWoD+5+jcsTINReKj/JDCJktvVcqgl
     lQXRa3DcWFony67H42wM0XJzrWCgSl26Go8HO4q4=

Answer 1

将规范化更改为relaxed/relaxed许多DKIM编码器在simple时遇到问题，具体取决于电子邮件的内容。然后使用GMAIL再次测试它，您可能还想使用像email tester这样的工具进行测试，该工具针对4种不同的DKIM解码器进行测试。

在centos 7上没有为opendkim身份验证密钥签署出站电子邮件的日志

1 个答案: