Re: Have tested lots of solutions now with signing-milter. What is the problem?

[Sebastian Nielsen]

its not DKIM that fails. Its S/MIME.





Sent: Wednesday, March 04, 2015 9:28 PM
To: Postfix users


We need to find out how the message is modified after it is signed.
For this, it does not help if you compare messages that differ in
time stamps in headers, hashcash output, S/MIME signatures, and
body content.

Capture one message 1) after DKIM signing but before transmission,
and 2) as received with DKIM verification failed.

If everything works as it should, 1) and 2) are identical except
for headers added in transit. If the DKIM verification fails, then
the file difference(s) will show what was changed.

But how can I retain a copy of message before milter? Could then remove the hashcash milter and DKIM milter (since those does not change that -b does succeed validation and no -b does fail validation) and send a test mail. -----Ursprungligt meddelande----- From: Wietse Venema Subject: Re: Have tested lots of solutions now with signing-milter. What is the problem? Wietse

smime.p7s
Description: S/MIME cryptographic signature