Bug #66162 for Mail-DKIM: Canonicalization fails

Fri Feb 25 02:48:46 2011 dmda [...] yandex.ru - Ticket created

Subject:	Canonicalization fails
Date:	Fri, 25 Feb 2011 10:48:37 +0300
To:	<bug-Mail-DKIM [...] rt.cpan.org>
From:	"jvlad" <dmda [...] yandex.ru>

If the email body contains a dot (.) at the 1st position, it will be duplicated as a part of canonicalization process and therefore the DKIM will be applied on wrong content and fail. I faced this problem with an email containing HTML with CSS containing a class: .Small {blah blah blah} the file created with --debug-canonicalization contained: ..Small {blah blah blah} ^^^(see doubled dot) the method I tried was simple/simple system: RHEL5 (Linux) 2.6.18-194.32.1.el5 #1 SMP Mon Dec 20 10:52:40 EST 2010 i686 i686 i386 GNU/Linux Perl: 5.8.8

Fri Feb 25 12:05:14 2011 jason [...] long.name - Correspondence added

On Fri Feb 25 02:48:46 2011, dmda@yandex.ru wrote: Show quoted text

> If the email body contains a dot (.) at the 1st position, it will be > duplicated as a part of canonicalization process and therefore the > DKIM will > be applied on wrong content and fail.

What you describe is the SMTP transmission encoding. What program are you using to generate the signature? Are you sure that program isn't adding the dot as part of its SMTP encoding? The dkimsign.pl program that's included in the Mail-DKIM package does not do this. I even created a sample message like you described and verified that it does not add a dot. Jason

Fri Feb 25 12:05:15 2011 The RT System itself - Status changed from 'new' to 'open'

Fri Feb 25 14:11:47 2011 dmda [...] yandex.ru - Correspondence added

Subject:	Re: [rt.cpan.org #66162] Canonicalization fails
Date:	Fri, 25 Feb 2011 21:52:49 +0300
To:	<bug-Mail-DKIM [...] rt.cpan.org>
From:	"jvlad" <dmda [...] yandex.ru>

Hi Jason, I'm sorry for the mistake, please disregard my report. I found out that the error was on my own part. The dots in the 1st positions were duplicated on purpose (otherwise the first dot would be treated as EOF) so I had to sign the mail before the duplication. Now it works fine. Should I find any real problem I'll report it. Best regards, -j Show quoted text

----- Original Message ----- From: "Jason Long via RT" <bug-Mail-DKIM@rt.cpan.org> To: <dmda@yandex.ru> Sent: Friday, February 25, 2011 8:05 PM Subject: [rt.cpan.org #66162] Canonicalization fails

> <URL: https://rt.cpan.org/Ticket/Display.html?id=66162 > > > On Fri Feb 25 02:48:46 2011, dmda@yandex.ru wrote:

>> If the email body contains a dot (.) at the 1st position, it will be >> duplicated as a part of canonicalization process and therefore the >> DKIM will >> be applied on wrong content and fail.

> > > What you describe is the SMTP transmission encoding. What program are > you using to generate the signature? Are you sure that program isn't > adding the dot as part of its SMTP encoding? > > The dkimsign.pl program that's included in the Mail-DKIM package does > not do this. I even created a sample message like you described and > verified that it does not add a dot. > > > Jason >

Wed Nov 28 09:40:32 2012 jason [...] long.name - Taken

Wed Nov 28 09:40:42 2012 jason [...] long.name - Status changed from 'open' to 'resolved'