Package: dbndns
Version: 1:1.05-8
Severity: normal

Dear Maintainer,

It seems that large responses, such as text records containing DKIM
information, are split after 127 bytes and white space is added between the
chunks. Therefore DKIM verification fails.

The data file contains the correct information:
'mail._domainkey.domain.org:v=DKIM1; k=rsa; t=y;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDf4F8BTCaGiHr5prgXrDwOtW8yv09m+SfUNsXJSt2zjqw83KOByQ1PaYsq4mzqjytnWPCnt/iX3vynMsdQ6DJJ8wDwPGk0wYolN48HECn5Ty+C8cff4P21b/AG6osoFhXwDLaOyMDBwTlFVXAYONiu8BRoaYM5tpT0SpFPlNMxSwIDAQAB:300

The data.cdb file is also correct:
v=DKIM1; k=rsa; t=y;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDf4F8BTCaGiHr5prgXrDwOtW8yv09m+SfUNsXJSt2zjqw83KOByQ1PaYsq4mzqjytnpWPCnt/iX3vynMsdQ6DJJ8wDwPGk0wYolN48HECn5Ty+C8cff4P21b/AG6osoFhXwDLaOyMDBwTlFVXAYONiu8BRoaYM5tpT0SpFPlNMxSwIDAQAB

But when querying the key, white space is added in the answer section after 127
bytes:

$ dig txt mail._domainkey.domain.org

; <<>> DiG 9.9.5-4-Debian <<>> txt mail._domainkey.domain.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 670
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;mail._domainkey.domain.org.    IN      TXT

;; ANSWER SECTION:
mail._domainkey.domain.org. 300 IN      TXT     "v=DKIM1\; k=rsa\; t=y\;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDf4F8BTCaGiHr5prgXrDwOtW8yv09m+SfUNsXJSt2zjqw83KOByQ1PaYsq4mzqjytn"
"WPCnt/iX3vynMsdQ6DJJ8wDwPGk0wYolN48HECn5Ty+C8cff4P21b/AG6osoFhXwDLaOyMDBwTlFVXAYONiu8BRoaYM5tpT0SpFPlNMxSwIDAQAB"

;; AUTHORITY SECTION:
domain.org.             732     IN      NS      ns03.domain.eu.
domain.org.             732     IN      NS      ns01.domain.nl.
domain.org.             732     IN      NS      ns02.domain.be.

;; ADDITIONAL SECTION:
ns01.domain.nl. 36      IN      A       1.2.3.4
ns02.domain.be. 125     IN      A       1.2.3.5
ns03.domain.eu. 86      IN      A       1.2.3.6

;; Query time: 24 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Fri Jul 25 17:13:51 CEST 2014
;; MSG SIZE  rcvd: 446

The problem exists in the answer section where it says: jytn" "WP. I have tried
different resolvers as well as different keys. The response is smaller than 512
bytes. I found a similar issue here:
http://permalink.gmane.org/gmane.network.djbdns/13902.

Many thanks.



-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to