Problem with dkim header signature ?

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
User avatar
bagu
Normal user
Normal user
Posts: 219
Joined: 2005-06-17 03:08
Location: France
Contact:

Problem with dkim header signature ?

Post by bagu » 2016-02-19 13:01

Hello,

I made some checks on my mail server, spf/dkim/dmarc, and i receive this error :
DKIM-Signature header exists but is not valid

Do someone know how to correct this ?

Because other checks pass without errors :
DKIM Information:

DKIM Signature

Message contains this DKIM Signature:


Signature Information:
v= Version: 1
a= Algorithm: rsa-sha256
c= Method: relaxed/relaxed
d= Domain: bagu.fr
s= Selector: mail
q= Protocol: dns/txt
bh= fZ0P7eyA4v8TSDSAJ7vccCddePsydtICQqIt820UHJw=
h= Signed Headers: From:Subject:Date:Message-ID:To:MIME-Version:Content-Type
b= Data: lP4op4xV3/fi9Br4i9pZytvYMTSIYJZMWc7/pOA8OkRzar7LWNWfy0O1iYUn8ZQy+V4Pqx0iYqckeiPoxrLerCxfYE5mncy5hvVNSmgAbQpmNp23zY2f1R8IMCI+jbiLRyI7VeCrYu41FXVFls0USWvuJ9/FvG+Zhut4kEWfME3/hF5QTaHS8h08tXSf9XLQl8wAPGFuFSG26i8JaO5MJ7DOz4yV1rmGitQoRimRmuGA8AEPe8Hame3dr/
5lzhpaHbGTY8qyeIGXZ9ajtFd28O5tENLDsLgrDyjXQw6Xf0u7lefvnzGMOEHKd33/shsqAFXCTQlXomadS1Da0vIqlA==
Public Key DNS Lookup

Building DNS Query for mail._domainkey.bagu.fr
Retrieved this publickey from DNS: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGgiEDlTMQ9TMccaugSLF4XxnNvFtB3RIQ32LjruQ7e3ezG5tdvtMFAEdzvxE0Wp/151dbqdWjEY2UeTDX5JvYXq0/5qjzuNEp9u4W+Q9C7Ke5aarC+RGCPiOeot/ps00P6Yx3hLcamlun5jwc5iAoFIxTQnQVWhCU0B4wFuPW2m1x9Kz945AreiSUx+m2p/ig38R25DHq34qyxhhzuQdOlG9y1CJMAMWyILyjupZYI4u/ZIVPo/7HPryIhnkmSkB4+CEDu8mYT1lMBT4TZn712R2MjW+9UkCzBSugEmMAwwQJ7CvxdbeaZbcI0foTwlxvZruCNtbiDD2OZnGQ0D9QIDAQAB
Validating Signature

result = pass
Details:
SPF Information:

Using this information that I obtained from the headers

Helo Address = mail.bagu.biz
From Address = contact@bagu.fr
From IP = 88.184.248.22
SPF Record Lookup

Looking up TXT SPF record for bagu.fr
Found the following namesevers for bagu.fr: kara.ns.cloudflare.com carl.ns.cloudflare.com
Retrieved this SPF Record: zone updated 20160219 (TTL = 7145)
using authoritative server (kara.ns.cloudflare.com) directly for SPF Check
Result: pass (Mechanism 'mx' matched)

Result code: pass
Local Explanation: bagu.fr: 88.184.248.22 is authorized to use 'contact@bagu.fr' in 'mfrom' identity (mechanism 'mx' matched)
spf_header = Received-SPF: pass (bagu.fr: 88.184.248.22 is authorized to use 'contact@bagu.fr' in 'mfrom' identity (mechanism 'mx' matched)) receiver=ip-172-31-3-128.us-west-1.compute.internal; identity=mailfrom; envelope-from="contact@bagu.fr"; helo=mail.bagu.biz; client-ip=88.184.248.22
hMailServer 5.6.8 With SpamAssassin 3.4.2

nat
Normal user
Normal user
Posts: 56
Joined: 2008-02-13 02:50
Location: US
Contact:

Re: Problem with dkim header signature ?

Post by nat » 2017-06-19 21:52

did you fix it -- and if yes how. I am getting the same error.

User avatar
bagu
Normal user
Normal user
Posts: 219
Joined: 2005-06-17 03:08
Location: France
Contact:

Re: Problem with dkim header signature ?

Post by bagu » 2017-06-19 23:47

Yes, but i don't remember how.

Here is the results now :

Code: Select all

DKIM Information:

DKIM Signature

Message contains this DKIM Signature:


Signature Information:
v= Version:         1
a= Algorithm:       rsa-sha256
c= Method:          relaxed/relaxed
d= Domain:          bagu.fr
s= Selector:        mail
q= Protocol:        dns/txt
bh=                 V+BC2CQH3cJIAZJosPEz9p8RuNFxL8xgkkv3T6r9SuI=
h= Signed Headers:  From:Date:Message-ID:To:MIME-Version:Content-Type
b= Data:            Jj1jV2dvi36yvSsQxCLEl5y1Pq/Uu2qGk3M9nio4ZXOVP56uBCQlwO9rZ/NUnkAoVWr7MO6lNnAqRFbrSrPpUH2TtAVqNLo3TogizBhYlmc+cYaAdD0Kf/BCr9LBwzBRH+fBfSrfs9KtJ59HEq/K50evl0eO5h72s8UQQ27kfzKUagcZnHGni+ct/zAA+FVfO6H8g9+2BffBepO3ldqH5JlaJ++VT+mdQzct7M1JvkCnmdfWdGnAYNqbsq
	WC7dG2lMujEHsfqR36gzdfyRMGUvhv6J+sJ2e8Xp6F7L6xqnNex+mIegYgDl8cY0u8MdRVAGWMILEod+oax1lADdPM4A==
Public Key DNS Lookup

Building DNS Query for mail._domainkey.bagu.fr
Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGgiEDlTMQ9TMccaugSLF4XxnNvFtB3RIQ32LjruQ7e3ezG5tdvtMFAEdzvxE0Wp/151dbqdWjEY2UeTDX5JvYXq0/5qjzuNEp9u4W+Q9C7Ke5aarC+RGCPiOeot/ps00P6Yx3hLcamlun5jwc5iAoFIxTQnQVWhCU0B4wFuPW2m1x9Kz945AreiSUx+m2p/ig38R25DHq34qyxhhzuQdOlG9y1CJMAMWyILyjupZYI4u/ZIVPo/7HPryIhnkmSkB4+CEDu8mYT1lMBT4TZn712R2MjW+9UkCzBSugEmMAwwQJ7CvxdbeaZbcI0foTwlxvZruCNtbiDD2OZnGQ0D9QIDAQAB
Validating Signature

result = pass
Details: 
hMailServer 5.6.8 With SpamAssassin 3.4.2

User avatar
mattg
Moderator
Moderator
Posts: 20881
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with dkim header signature ?

Post by mattg » 2017-06-20 01:00

The original tests showed a pass

I'd just guess that whatever gave the original error was only because an old entry was cached. Some time and a cache reset later - all pass as expected.

@nat
Please show exact error and where you are getting it
Screenshots are great
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply