On Sun, Oct 22, 2023 at 07:03:19PM +0200, brunoc68 via Exim-users wrote:
> Public key :
> "v=DKIM1;
> k=rsa;
> p=MIIBITANBgkqhkiG9w0BAQEFAAOCAQ4AMIIBCQKCAQAzv3BvHbwGsHWZjnROtaNQMhzkL6yob0e7w2Sbatu3m7uwl89KnBbZBkmoxXsMcpK+f1XF7eahWm71f1hFqMP7cwQVwdQ/268NfXBt73zMcMgMqDPrVH5ptz93j/uTlIv9LNLbQww5fyYhzqgdBID+KSTUg2ykZmhMcsKr5ippWZS5reYAlm9f8/na9iEpGuaecpTTALQ1Pswlmrxc1x36nqxu9f++l+q7bWgORGs3nPcjLLNguYgrduDqxWEyTM23BH8LYleIBZj+JEBMHwKGSos7hLmngbZhTZFiYo6igOr6S2m3O0dFdMjvPzdlv8IG2Z2bVmwPw7rpt/KorTrfAgMBAAE="
>
> key length : 2046bits
Oh, 2046 bits, really? Not 2048? I tried to check this record,
it doesn't look as RSA key:
% cat /tmp/key.pem
-----BEGIN PRIVATE KEY-----
MIIBITANBgkqhkiG9w0BAQEFAAOCAQ4AMIIBCQKCAQAzv3BvHbwGsHWZjnROtaNQMhzkL6yob0e7w2Sbatu3m7uwl89KnBbZBkmoxXsMcpK+f1XF7eahWm71f1hFqMP7cwQVwdQ/268NfXBt73zMcMgMqDPrVH5ptz93j/uTlIv9LNLbQww5fyYhzqgdBID+KSTUg2ykZmhMcsKr5ippWZS5reYAlm9f8/na9iEpGuaecpTTALQ1Pswlmrxc1x36nqxu9f++l+q7bWgORGs3nPcjLLNguYgrduDqxWEyTM23BH8LYleIBZj+JEBMHwKGSos7hLmngbZhTZFiYo6igOr6S2m3O0dFdMjvPzdlv8IG2Z2bVmwPw7rpt/KorTrfAgMBAAE=
-----END PRIVATE KEY-----
% openssl rsa -in /tmp/key.pem -noout
Could not read private key from /tmp/key.pem
40B7C589407F0000:error:1608010C:STORE
routines:ossl_store_handle_load_result:unsupported:../crypto/store/store_result.c:151:
This is something wrapped by ASN.1, but I have no ideas what is it:
% openssl asn1parse -in /tmp/key.pem
0:d=0 hl=4 l= 289 cons: SEQUENCE
4:d=1 hl=2 l= 13 cons: SEQUENCE
6:d=2 hl=2 l= 9 prim: OBJECT :rsaEncryption
17:d=2 hl=2 l= 0 prim: NULL
19:d=1 hl=4 l= 270 prim: BIT STRING
> *Your DKIM signature is not valid*
> ======================================
>
> To be noted : spamassassin also ends up with "DKIM_INVALID"
Did you use the same key for successful DKIM signings?
Isn't there some differences in DKIM selectors?
--
Eugene Berdnikov
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
