-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 02/22/18 15:34, Benny Pedersen wrote: > Benny Pedersen skrev den 2018-02-21 17:55: >> David Jones skrev den 2018-02-21 17:41: >> >>> I have that same code in my DKIM.pm and I am running 3.4.1. Maybe the >>> size acceptable for whitelisting is different from the DKIM_VALID >>> check? >> >> minimal key bits could be a plugin test yes, but imho it never made to do >> this >> >>> Does the check_dkim_valid function need to also check for the >>> dkim_minimum_key_bits size to consider it DKIM_VALID? >> >> i cant figure out where problem is either, since i am more a comal >> programmer then a perl :=) >> >> DKIM_VALID and DKIM_VALID_AU should not give pass if minimal key bits is to >> low > > sub check_dkim_valid { > my ($self, $pms, $full_ref, @acceptable_domains) = @_; > $self->_check_dkim_signature($pms) if !$pms->{dkim_checked_signature}; > my $result = 0; > if (!$pms->{dkim_valid}) { > # don't bother > } elsif (!@acceptable_domains) { > $result = 1; # no additional constraints, any signing domain will do, > # also any signing key size will do > } else { > $result = $self->_check_dkim_signed_by($pms,1,0,\@acceptable_domains); > } > return $result; > } > > there we go :( > > dkim signed should be any key bits allowed, but dkim valid should not allow > under minimal key bits
$self->_check_dkim_signed_by already checks for miminal key bits Giovanni -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEqg3TnG6R3qYMxl94+r7qCYlyWOUFAlqO1hgACgkQ+r7qCYly WOWbzQ//ZmOupz9AmyVV/155HcYOY9KpSN3FPNUxzNbfpQK/zEA2XK4XPIEKcsYn qr7e81PlWnW/dKgquItylHxk3DOHUbn/+yUJ0WzVpbXXGWlW7Byf/PibzYSQa1tg 7RvQXgVBFjC+O67BhDxQH3JnHswf4H9pRjuF0jtErA/rgDEG8g8MV/3DG0jj0FpD qRNKpkRy1pkS1lTe+yV9kvcz9pwiRygPjMGvMlEr+1pQ3T8iEgFTPSiBdwyVnaEc JcgtpO/JQeGMcblIy+jF0ZJQbBYeHxD/W3S8gFcKbo0OT1CBdG/qARvA6TnUrTqb J/kC4HfRgsWRe86SFSMOSmOCyhLuuKIv95Xsq+u9cqu9vPlJ80eY8Gf/bEg8wT5f zlqecksTYN6Dl7GW7eKl11luQm6OM29p+a9woZ+i5K+pFokEfISg8LlpyUOVMb4O AmHLE5O7xI+lvyK4g0CcQpbLC0EHaYCas/8q/0zKVCyws0gb5Pg8XB7K/VLDjtWP etw6Qj8VGUPER1Kidh8VVH/My0kr9sRdFIhcJqCT4ISUfUjEELXzrLqcGdMxBoQg /vTg/wnyfrxjIe6H9HuSEFiP0KWwlmwa0YPR0tU1SmxIm/fsOAuXaJDQiJdJZWEF Koto7UjxXilu//X29y+ClF4DtwqYNO3zhDAO3eujwu5y3BSoOgo= =iKOh -----END PGP SIGNATURE-----