0

难以记录 opendkim 签名以解决为什么 txt 消息正确签名但 html 消息在 Centos 7 上的 phplist 设置中未正确签名。phplist 的开发人员要求提供日志以帮助解决问题,但我无法生成它们.

这是我的 /etc/opendkim.conf。示例日志输出

AutoRestart             Yes
AutoRestartRate         10/1h
LogWhy                  Yes
Syslog                  Yes
SyslogSuccess           Yes
Mode                    sv
Canonicalization        relaxed/simple
ExternalIgnoreList  refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrutedHosts
KeyTable                refile:/etc/opendkim/KeyTable
SigningTable            refile:/etc/opendkim/SigningTable
SignatureAlgorithm  rsa-sha256
Socket                  inet:8891@localhost
PidFile                 /var/run/opendkim/opendkim.pid
UMask                   022
UserID                  opendkim:opendkim
TemporaryDirectory  /var/tmp

这是邮件日志文件。没有迹象表明正在签署出站电子邮件:

Oct 18 16:04:40 mail postfix/pickup[26230]: C65F13F7A3: uid=700 from=<blablabla@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/cleanup[26545]: C65F13F7A3: message-id=<f4f45a6587f55f03181cc72f612ff0b3@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/qmgr[13116]: C65F13F7A3: from=<blablabla@wonderfulrama.com>, size=8817, nrcpt=1 (queue active)
Oct 18 16:04:40 mail postfix/pickup[26230]: D9E103F2D0: uid=700 from=<blablabla@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/cleanup[26545]: D9E103F2D0: message-id=<478a3610c0d3afb3a7a12d11a57a8728@wonderfulrama.com>
Oct 18 16:04:40 mail postfix/qmgr[13116]: D9E103F2D0: from=<blablabla@wonderfulrama.com>, size=2628, nrcpt=1 (queue active)
Oct 18 16:04:41 mail postfix/smtp[26556]: C65F13F7A3: to=<blanketyblank@gmail.com>, relay=gmail-smtp-in.l.google.com[209.85.xxx,xxx]:25, delay=0.96, delays=0.11/0.06/0.35/0.44, dsn=2.0.0, status=sent (250 2.0.0 OK 1476806682 t1si21324804qke.238 - gsmtp)
Oct 18 16:04:41 mail postfix/qmgr[13116]: C65F13F7A3: removed
Oct 18 16:04:41 mail postfix/smtp[26557]: D9E103F2D0: to=<blanketyblank@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.xxx,xxx]:25, delay=0.97, delays=0.09/0.06/0.3/0.52, dsn=2.0.0, status=sent (250 2.0.0 OK 1476806682 e4si21333125qkc.144 - gsmtp)
Oct 18 16:04:41 mail postfix/qmgr[13116]: D9E103F2D0: removed

然而,邮件标题显示标志:

这是经过正确身份验证的仅出站 txt 消息的标志:

Authentication-Results: mx.google.com;
       dkim=pass header.i=@wonderfulrama.com;
       spf=pass (google.com: domain of blablabla@wonderfulrama.com designates xxx.xxx.xxx.xxx as permitted sender) smtp.mailfrom=blablabla@wonderfulrama.com
Received: by mail.wonderfulrama.com (Postfix, from userid 700)
    id D9E103F2D0; Tue, 18 Oct 2016 16:04:40 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wonderfulrama.com;
    s=default; t=1476806680;
    bh=2Qo7Vw5ynEtee8vcpiVBDV4Mwd/Xi+0j1Vcg+Kge0HM=;
    h=To:Subject:Date:From:List-Help:List-Unsubscribe:List-Subscribe:
     List-Owner;
    b=YX7WZykE5G7yHoC/xb1JrCrJ+QfOQKNFGzA7pd38krpZjVWxGIRHA2QwuzBibOmrB
     9MW7LE2KszYj6w/S71Ru5hmDH9L5A+pgMfohxOk0/ujoDwUFX3tSA6atRZHsxYBdke
     kiEyYIdmHhsA5YWQRagA01QXVOpMCkkha5ZJEsus=

这是来自出站 html 消息的失败电子邮件标头的标志:

Authentication-Results: mx.google.com;
       dkim=neutral (body hash did not verify) header.i=@wonderfulrama.com;
       spf=pass (google.com: domain of blablabla@wonderfulrama.com designates xxx.xxx.xxx.xxx as permitted sender) smtp.mailfrom=blablabla@wonderfulrama.com
Received: by mail.wonderfulrama.com (Postfix, from userid 700)
    id C65F13F7A3; Tue, 18 Oct 2016 16:04:40 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wonderfulrama.com;
    s=default; t=1476806680;
    bh=OU///H7E0TINCIYEiNDAPlxKESdq02278nItJZ7WOZM=;
    h=To:Subject:Date:From:List-Help:List-Unsubscribe:List-Subscribe:
     List-Owner;
    b=o3a9JvADtFZ0LQFqwB9SAT7XSMbqX4J6JSbaRaq617cuvwNlnGXz/sOzyvvgOQc2i
     XiNMZqWqMK0p/3+f52amFc7FLYmNkZ008dhtbWoD+5+jcsTINReKj/JDCJktvVcqgl
     lQXRa3DcWFony67H42wM0XJzrWCgSl26Go8HO4q4=
4

1 回答 1

0

将规范化更改为许多 DKIM 编码器在取决于电子邮件的内容时relaxed/relaxed遇到问题。simple然后使用 GMAIL 再次对其进行测试,您可能还想使用电子邮件测试器之类的工具进行测试,该工具可以针对 4 种不同的 DKIM 解码器进行测试。

于 2016-10-19T20:18:26.257 回答