iRedMail — Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

Re: Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

null@example.com (Cthulhu) — Fri, 15 Sep 2023 12:33:38 +0000

Open an own thread and provide related informations if you want help

Re: Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

null@example.com (Axenic) — Fri, 15 Sep 2023 05:57:28 +0000

Hi,

I have the same problem. Have you fixed it? My two other domains works correct. But for one domain amavisd adds the space in DKIM signature.

Re: Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

null@example.com (MeesMees) — Thu, 24 Dec 2020 13:08:57 +0000

Hi,

Thanks for the reply

The config file is correct and I can't find an entry with a space in any other config! What's strange is that it's passing other DMARC tests so I'm now thinking it could be a false positive from the mxtoolbox email deliverability test. The DKIM spec does allow for a space between the d and the domain name

Re: Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

null@example.com (Bughandle) — Wed, 23 Dec 2020 09:42:42 +0000

I believe you have a typo in dkim_signature_options_bysender_maps variable (a heading space in the "d" string). It's in /etc/amavis/conf.d/50-user on my install

"domain.org.uk" => { d => " domain.org.uk", a => 'rsa-sha256', c => 'relaxed/simple', ttl => 10*24*3600 },
#vs
"domain.org.uk" => { d => "domain.org.uk", a => 'rsa-sha256', c => 'relaxed/simple', ttl => 10*24*3600 },

Space In DKIM Signature - Is it causing DKIM Authentication to Fail?

null@example.com (MeesMees) — Sun, 20 Dec 2020 17:25:24 +0000

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.3.2
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Ubuntu LTS 20.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

I am running multiple domains on the server and all pass the mxtoolbox email deliverability test with both DKIM Alignment and Authentication correct

I have one domain which passes Alignment but fails authentication. I have checked the DNS records, amavisd-new testkeys is correct and the only difference I can find is that in the DKIM Signature shown on the mxtoolbox results there is a space between the 'd=' and the domain name on the failing domain. All other factors appear to be the same.

All domains can send and receive email correctly

the amavisd config file appear correct

On the failing domain the DKIM-Signature v=1; a=rsa-sha256; c=relaxed/simple; d= domain.org.uk; h=content-type:content-type:mime-version :subject:subject:message-id:to:from:from:date:date; s=dkim ...

Note the space after the d=. I'm speculating that this is causing the DKIM authentication to fail?

On the good domain the DKIM-Signature v=1; a=rsa-sha256; c=relaxed/simple; d=domain.org.uk; h=content-type:content-type:mime-version:subject:subject :message-id:to:from:from:date:date; s=dkim; .......

That's the only difference I can find!

Help

PS Thankyou for all the work you do on this? This is the first weirdness I've experienced and I know it's something I've done - I just can't figure it out!