X7ROOT File Manager
Current Path:
/usr/share/doc/opendkim-2.11.0
usr
/
share
/
doc
/
opendkim-2.11.0
/
📁
..
📄
FEATURES
(4.02 KB)
📄
INSTALL
(7.5 KB)
📄
KNOWNBUGS
(1.01 KB)
📄
README
(29.09 KB)
📄
README.fedora
(3.73 KB)
📄
RELEASE_NOTES
(77.78 KB)
📄
RELEASE_NOTES.Sendmail
(58.96 KB)
📄
authheaders-check-setup-hook.lua
(2.45 KB)
📄
convert_keylist.sh
(1.99 KB)
📄
final.lua.sample
(2.04 KB)
📄
opendkim.conf.sample
(21.29 KB)
📄
opendkim.conf.simple
(714 B)
📄
opendkim.conf.simple-verify
(435 B)
📄
screen.lua.sample
(984 B)
📄
setup.lua.sample
(2.17 KB)
Editing: RELEASE_NOTES.Sendmail
DKIM-MILTER RELEASE NOTES This listing shows the versions of the dkim-milter package, the date of release, and a summary of the changes in that release. Bug and feature request (RFE) numbers that start with "SF" were logged via Sourceforge (http://www.sourceforge.net) trackers. Those not so labeled were logged internally at Sendmail, Inc. 2.8.3 2009/05/31 Close the configuration file after reading it, plugging a descriptor leak. Release memory associated with old configuration nodes (i.e. strings) as well as the nodes themselves. Connect the configuration handle to its allocated data so cleanup can actually be thorough. Fix an error message reported inside _FFR_REPLACE_RULES. Plug a memory leak in mlfi_header() tripped when errors occur. Since ADSP has not yet been registered by IANA, adjust its method label in Authentication-Results accordingly. Include selector, domain and other text if possible when logging key retrieval failures. Add _FFR_SENDER_HEADERS, allowing user control over which header fields are used to make the sign/verify decision and perform key selection. LIBDKIM: Initialize canon_lastchar in dkim_add_canon(). LIBDKIM: Clean up any compiled regular expressions in dkim_close(). LIBDKIM: Fix some type-related compiler warnings. 2.8.2 2009/02/17 Request a signature with an "i=" tag if signing for subdomains and a keylist entry matches. Previously this only occurred when using an explicit domain list. Problem noted by S. Moonesamy of Eland Systems. Fixes in and around dkim_socket_cleanup(). Problem noted by S. Moonesamy of Eland Systems. LIBDKIM: When logging a d2i_PUBKEY_bio() or EVP_PKEY_get1_RSA() failure, also log the selector and domain involved so manual diagnostics are possible. LIBDKIM/LIBAR: Feature request #SF2380508: Add new test for WITHOUT_LIBSM which removes references to libsm's sm_strl*() functions, so that libdkim and libar can stand on their own on systems which provide the strl*() functions. Requested by Frederik Pettai. LIBDKIM: Report DKIM_STAT_NOSIG if the caller commands that all signatures should be ignored. LIBDKIM: Plug a memory leak caused when responding to a malloc() failure. LIBDKIM: New signature error code DKIM_SIGERROR_KEYDECODE, used if d2i_PUBKEY_BIO() or EVP_PKEY_get1_RSA fails in dkim_sig_process(). LIBAR: Make reference to the "_res" structure more thread-safe. BUILD: Make use of conf_dkim_filter_ENVDEF since site.config.m4.dist refers to it. Problem noted by S. Moonesamy of Eland Systems. 2.8.1 2009/01/16 LIBDKIM: Fix bug #SF2508602: Add a translation string for DKIM_SIGERROR_KEYREVOKED and fix dkim_eom_verify() so it returns DKIM_STAT_REVOKED when appropriate. Problem noted by Mike Markley of Bank of America. 2.8.0 2009/01/08 Add configuration option "EnableCoredumps" which makes an explicit kernel request for cores on crashes. Currently only meaningful on Linux. Add configuration option "AuthServID" which sets the "authserv-id" token to use when generating Authentication-Results header fields. Report "fail" instead of "hardfail" on authentication failures, in compliance with the Authentication-Results: draft. Add _FFR_REPORT_INTERVALS, experimental support for the "ri" tag extension to DKIM policy and key records for specifying reporting intervals. Feature request #SF1985886: Add _FFR_MULTIPLE_SIGNATURES, allowing one instance of the filter to add multiple signatures. Suggested by Dave Crocker. Add "TemporaryDirectory" configuration file option for requesting that libdkim use an alternate directory for creating temporary files, and "KeepTemporaryFiles" for requesting that libdkim not delete those files for debugging purposes. Add optional support for the "unbound" asynchronous resolver library as it is DNSSEC-aware. Adds four new configuration file items: "BogusKey", "BogusPolicy", "InsecureKey" and "InsecurePolicy". Also add dkim_sig_getdnssec() and dkim_policy_getdnssec() to libdkim so callers can tell what the DNSSEC evaluation result was for each query. Based on a patch from John Dickinson. Add "BaseDirectory" configuration file option for specifying the desired current directory of the process. Make use of the key and policy "rs" tag, if present, when doing SMTP rejections. Use MTA macro "$j" as the hostname in generated reports instead of the output of gethostname() since on some systems the latter may not be fully-qualified. Remove ANTICIPATE_SENDMAIL_MUNGE, replacing it with a runtime check for the milter v2 feature which suppresses the addition of spaces in headers. Add _FFR_COMMAIZE which attempts to predict the reformatting the MTA will do to certain header fields to reduce verification failures. Add _FFR_DKIM_REPUTATION enabling a function used to query an open DKIM reputation service regarding the signing user and signing domain. The service's URL is http://www.dkim-reputation.org. (EXPERIMENTAL) Fix preloading of configuration defaults. Fix bug #SF2236040: Quote all of the POSIX regular expression special characters, not just some of them. Reported by Mark Martinec. When possible, log the selector and domain of the signature evaluated along with any errors in the libcrypto stack. LIBDKIM: Add "smtpbuf", "smtplen" and "interval" parameters to dkim_sig_getreportinfo() and dkim_policy_getreportinfo(). Also, remove the assertion that "addr" be non-NULL. LIBDKIM: Add DKIM_LIBFLAGS_ACCEPTDK which enables compatibility with DomainKeys-formatted key records. LIBDKIM: Adjust signature formatting for legibility. LIBDKIM: Check return status from dkim_canon_getfinal() to avoid bad dereferences. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Render the DKIM handle unusable in dkim_eoh_sign() if a required header was absent. Activate _FFR_REQUIRED_HEADERS. 2.7.2 2008/09/02 Avoid memory leaks and infinite loops when releasing thread-specific memory. Reported by Jeff Earickson. 2.7.1 2008/08/27 Set up required callbacks for OpenSSL thread-safety. Problem noted by Zbigniew Szalbot. Disallow empty "t=" and "x=" tags. Return DKIM_STAT_KEYFAIL for various DNS key retrieval failures instead of DKIM_STAT_INTERNAL. 2.7.0 2008/07/23 Update to draft-ietf-dkim-ssp-04. In doing so, rename "ASPDiscard" to "ADSPDiscard", "ASPNoSuchDomain" to "ADSPNoSuchDomain" and "SendASPReports" to "SendADSPReports" in the configuration file. Feature request #29738: Add "TrustSignaturesFrom" configuration file item allowing fine-grained control over third-party signature handling. Feature request #SF2018848: Add "LocalADSP" feature allowing policy assertions from domains known to have specific policies but which don't publish ADSP records. Suggested by Bruno Kraychete da Costa. LIBDKIM: Fix an off-by-one overrun check in key and policy record decoding. Problem noted by John Dickinson. 2.6.0 2008/06/11 Remove "signaturemissing" as an old-style configuration action as it has been superseded by "ASPDiscard" and related functions. Add "SendASPReports" configuration option which generates ASP failure reports if requested by the sending domain. Update report generation for verification failures to use the new Abuse Reporting Format (ARF) and DKIM Reporting draft proposals. Add "MustBeSigned" configuration option, requiring signatures to cover specific headers if present. Rename "UseASPDiscard" to "ASPDiscard". Add "ASPNoSuchDomain" configuration option which rejects mail that appears to come from nonexistent domains as reported by the Author Signing Practises check. Add "ReportAddress" configuration option, used for defining the From: header of reports mailed out. Yet another compatibility fix with respect to Sleepycat DB. Fix processing of "LogWhy" configuration parameter. Problem noted by Erik Lotspeich. Add "-n" command line flag which parses the command line arguments and configuration file(s), then exits with an appropriate status code. Report DKIM and ASP results separately via the same Authentication-Results header field. Previous versions would alter the DKIM result based on ASP. Fix bug #SF1976931: Restore function of "nosignature" old-style action configuration, connected to "AlwaysAddARHeader". Problem noted by Lucas Brasilino. Feature request #SF1940233: Add "DontSignMailTo" configuration option, allowing a list of recipient patterns whose mail should not be signed. Requested by Don Hughes. LIBDKIM: Rename dkim_reportinfo() to dkim_sig_getreportinfo(), and add dkim_policy_getreportinfo(). LIBDKIM: Add several more signature error codes covering various key-related errors. LIBDKIM: Add dkim_sig_hdrsigned() utility, DKIM_OPTS_MUSTBESIGNED option, and DKIM_SIGERROR_MBSFAILED error code. LIBDKIM: Fix a bug in the computation of the result for dkim_canon_minbody(). LIBDKIM: Report corrupted base64 chunks instead of quietly tolerating them. LIBDKIM: Tidy up the cleanup code in dkim-canon.c. LIBDKIM: Properly handle "tag=" at the end of a data set (i.e. the tag exists and has an empty value). LIBDKIM: Use larger unsigned data types in dkim_sig_future() as was done elsewhere. LIBDKIM: Always populate a DKIM_SIGINFO with domain and selector before there's an opportunity for other parsing short-circuits. LIBDKIM: Fix bug #SF1984685: Remove the "margin" parameter from dkim_getsighdr(); make it controlled by a new function, dkim_set_margin(), so that the signed copy and the user-requested copy are identical. Activate _FFR_AUTHSERV_JOBID. 2.5.5 2008/04/25 Fix bug #SF1947301: Close up a logic problem in "UseASPDiscard" handling which could cause false rejections of mail from domains advertising "discardable" policies. Problem noted by Doug Kingston. LIBDKIM: Another compatibility fix with respect to Sleepycat DB. 2.5.4 2008/04/17 Skip signatures with errors in dkimf_authorsigok(). Avoid a NULL dereference in dkimf_config_reload() when starting without a configuration file. Fix an alignment problem in dkimf_checkip(). Problem reported by Jeff A. Earickson. LIBDKIM: Fix bug #SF1942387: Per RFC4871, disallow "l=" values that exceed the size of the canonicalized message body. 2.5.3 2008/04/14 Add "AllowSHA1Only" configuration option which permits operation of verifiers that only know about SHA1. Without this, a filter compiled with only SHA1 support will refuse to start in verifier mode. Add "LogWhy" configuration parameter and "-W" command line flag to request detailed logging about why a message was not signed by the filter. Intended for debugging; not intended for normal operation. Another tweak to parameters passed to db->open(). Based on patches from Jukka Salmi and S. Moonesamy. Fixes in ares_parse() to match the current syntax. In particular, deal with the fact that some of our tokens can legally appear in e-mail addresses. Problem noted by S. Moonesamy of Eland Systems. LIBDKIM: Evaluate key granularity against the "i=" value rather than the value of the From: header per RFC4871. Problem noted by Jason Long. LIBDKIM: Remove the chartable stuff from dkim-tables.c as it is not used anywhere. LIBDKIM: Fix bug #SF1940302: Perform stronger validation of the value of the "h=" tag. 2.5.2 2008/03/28 Preserve the sender's domain name outside of mlfi_eoh() as it's now needed in mlfi_eom(). Problem noted by Andy Fiddaman. Fix bug #SF1921873: Pass "-K" command line switch into the new configuration handling code. Problem noted by Al Smith. TOOLS: Fix flags portion of the TXT record output by dkim-genkey. Problem noted by Michael Carland. BUILD: Fix bug #SF1922422: Fix linker problems when POPAUTH is defined. 2.5.1 2008/03/20 Update for draft-kucherawy-sender-auth-header-14. Fix bug #SF1911328: Restore proper behaviour of SignHeaders and OmitHeaders, broken in the prior release's configuration overhaul. Problem reported by Jason Molzen. Fix bug #SF1912332: Fix parameters passed to db->open(). Problem reported by Tony Earnshaw. Fix bug #SF1912569: Initialize mutexes before entering test mode. Patch from Kaspar Brand. LIBDKIM: Add "subject" to "should_signhdrs" per RFC4871 section 5.5. LIBDKIM: More boundary checking fixes in dkim_canon_selecthdrs(). Problem noted by Warren Horvath. LIBDKIM: Fix bug #SF1820084: Return DKIM_STAT_MULTIDNSREPLY if a DNS query returns multiple records. 2.5.0 2008/03/06 Add "AutoRestartCount" and "AutoRestartRate" configuration parameters to limit runaway restart loops. Feature request #SF1735573: Add "AlwaysAddARHeader" option, which will add an Authentication-Results of "none" for unsigned messages from domains without a "strict" policy. Feature request #SF1807748: Reload the configuration file on receipt of SIGUSR1. Requested by Florian Sager. Feature request #SF1811969: Add _FFR_BODYLENGTH_DB which adds a "BodyLengthDBFile" feature, allowing a per-recipient decision on whether or not to use an "l=" tag when signing. Patch contributed by Daniel Black. Feature request #SF1841955: Add an "Include" facility to the configuration file. Feature request #SF1876941: Make the syslog facility selectable. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1876943: Add _FFR_AUTHSERV_JOBID allowing the job ID to be included as part of the "authserv-id" in Authentication-Results: headers. Based on a patch from Jose-Marcio Martins da Cruz of Ecole des Mines de Paris. Feature request #SF1890581: Attempt to clean up a UNIX domain socket in the non-AutoRestart case as well. Requested by Daniel Black. Add "MilterDebug" configuration file option for requesting debugging output from the filter. Add "FixCRLF" configuration file option which activates the DKIM_LIBFLAGS_FIXCRLF flag (see below). Update to draft-ietf-dkim-ssp-03. In doing so, rename the "UseSSPDeny" configuration option to "UseASPDiscard". Handle an error from dkim_getsighdr() properly in mlfi_eom(). When VERIFY_DOMAINKEYS is active, don't short-circuit mlfi_eoh() between dk_verify() and dk_eoh() or a segmentation fault below dk_body() could result. LIBDKIM: Feature request #SF1823059: Export key, signature and policy syntax checking capability via the API. Based on a patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Assert defaults for "c" and "q" tags when parsing signature headers. Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Better handling of truncated DNS replies; instead of just giving up if the "tc" (truncated) bit is set in the reply, see if there was enough of a reply returned to be able to complete the request. LIBDKIM: Fix recycling bug in header canonicalizations which was causing signatures other than the first one to fail in most cases. LIBDKIM: Add new dkim_chunk() interface. LIBDKIM: Enforce DKIM_OPTS_QUERYMETHOD library option even if there were no valid signatures. LIBDKIM: New DKIM_LIBFLAGS_FIXCRLF which requests that "naked" CRs and LFs be converted to CRLFs during canonicalization when signing. LIBDKIM: Fix bounds checking in dkim_canon_selecthdrs(). LIBAR: Eliminate a possible race condition in ar_dispatcher(). LIBAR: Timeouts passed to select() can't be bigger than 10^8. Problem noted by S. Moonesamy of Eland Systems. BUILD: Feature request #SF1876242: Install the filter in EBINDIR and everything else in UBINDIR. 2.4.4 2008/01/25 In mlfi_close(), don't assume the libmilter private context pointer is not NULL. Fail to start up if told to load a key list which resulted in no keys being loaded. When "AutoRestart" is in use, the parent will now wait for the child to terminate before exiting. Thus, something that signals the process ID in the pid file can also wait on that process to be gone before being sure that the service has actually shut down. Include the job ID when logging about Authentication-Results: headers that can't be parsed. Problem noted by S. Moonesamy. LIBDKIM: In dkim_policy(), skip invalid signatures during evaluation of step 1 of SSP as the signature handle may not have been fully populated. 2.4.3 2008/01/18 Request addition of an "i=" tag in the signature when signing for subdomains. Patch from Alin Nastac. TOOLS: Fix bug #SF1867259: "echo -n" is not portable. Problem noted by Gary Mills. TOOLS: Fix bug #SF1867869: Output of the "t=" value was incorrect with respect to the "s" flag. Reported by Geoff Adams. LIBAR: Further handling of the absence of "nameserver" lines in resolv.conf, this time in the manual processing code. LIBDKIM: Fix bug #SF1867839: 64-bit portability in rfc2822.c. Patch from Geoff Adams. LIBDKIM: Tighten up correctness of the first SSP test ("valid originator signature") in dkim_policy(). Problem noted by Alin Nastac. LIBDKIM: DKIM_SIGINFO handles are now initialized with an error code of DKIM_SIGERROR_UNKNOWN. The code only becomes DKIM_SIGERROR_OK after the cryptographic verification code returns a success result. BUILD: Fix bug #SF1818906: Update site.config.m4 to include a flag for installing libdkim when compiling static libraries, and installing dkim.h in either case. Requested by Chris Behrens of Concentric Network Corporation. 2.4.2 2008/01/02 Remove "-H" from the usage message. It was meant to be a command line interface to "AlwaysSignHeaders" but was never implemented. Problem noted by Jeff Anton. LIBDKIM: Make dkim_islwsp() into a macro to drastically reduce the number of function calls made during canonicalization. LIBDKIM: Fix bug #SF1857484: Fix logic problem in dkim_policy() with the new pstate checks. Problem noted by Werner Wiethege; patch from Chris Behrens of Concentric Network Corporation. 2.4.1 2007/12/20 Update for latest Authentication-Results: header draft. Avoid a NULL dereference in dkim_get_key(). Problem noted by Chris Behrens of Concentric Network Corporation. Fix bug #SF1842970: Make the overall header byte count check configurable, and increase the default. Also, add "On-Security" (configuration file) and "security" (command line) options for controlling the default reaction to such conditions. While we're at it, add an "On-Default" and "default" option for making a global action setting. Requested by Mark Martinec. LIBAR: Fix bug #SF1852618: Handle default case of no "nameserver" lines in /etc/resolv.conf. Problem noted by Mike Markley of Bank of America. LIBDKIM: Fix bug #SF1824876: Add "dkim_pstate" and make dkim_policy() re-entrant. Requested by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1843733, SF1843782: Tighten up header name matching in dkim_get_header() and dkim_get_sender(). Patches from Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1843788: Fix an off-by-one length bug in dkim_header(). Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1850973: Remove MAXHDRCNT; make the arrays it previously defined dynamic. Reported by Mike Markley of Bank of America. LIBDKIM: Feature request #SF1841974: Numerous performance enhancements from Chris Behrens of Concentric Network Corporation. 2.4.0 2007/11/30 Take advantage of some more features that were introduced with milter v2 in sendmail 8.14.0: o If all canonicalizations are satisfied in terms of length limits, advise the MTA to stop sending the message body to reduce unneeded I/O. o Turn off as many unnecessary SMTP protocol steps as possible. o Fail option negotiation if any of the milter features required are not available. o If specific MTA macros are to be used for making the sign vs. verify decision, explicitly request them. Prevent corruption in Authentication-Results: headers caused by signatures that have explicit "i=" values. Report "hardfail" instead of "fail" on authentication failures, in compliance with the Authentication-Results: draft. Amend the "-M" command line option and "MacroList" configuration options to allow a list of possible values for each macro. Add _FFR_SELECTOR_HEADER, adding the means to choose which selector (and thus which key) is used to sign based on the value found in a particular header. Requested by Steve Jones of Bank of America. Add dkimf_dstring*() (dynamic string) functions and clean up some code by making use of it. Skip all the userid and group changes when either "-u" or "UserID" is in use if the requested user is the same as the executing user. Fix use of "UseSSPDeny" to include handling of unsigned messages. Fix bug #SF1834701: Log a warning and temp-fail the message if a key list is in use that didn't match the sender for a message which should be signed. Problem noted by Jim Hermann. Patch #SF1796697: Add _FFR_REPLACE_RULES, adding the facility to do substring replacement before signing to anticipate things like the MTA "masquerade" and "genericstable" functions. Requires further development. Replace "gentxt.csh" with more robust "dkim-genkey" utility. Feature request #SF1811962: Add new utilities "dkim-testkey" which verifies that a public key is readable and properly formatted and matches the locally-provided private key, and "dkim-testssp" which retrieves a domain's sender signing practises record and prints it in a human-readable form. Based on code contributed by Daniel Black. Feature request #SF1817253: Add "UMask" configuration file option. Suggested by Daniel Black. Feature request #SF1818863: Add a section to site.config.m4.dist to request a build of the shared object version of libdkim. Requested by Chris Behrens of Concentric Network Corporation. Feature request #SF1834748: Use a more meaningful SMTP reply when rejecting a message at the SMTP level due to SSP. Suggested by S. Moonesamy of Eland Systems. LIBDKIM: Return DKIM_STAT_NOKEY from dkim_get_key_dns() if the answer count comes back zero, rather than DKIM_STAT_CANTVRFY. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Plug a memory leak in dkim_get_key(). Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Replace a dicey memcpy() call with memmove(). Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Add DKIM_CBSTAT_NOTFOUND and DKIM_CBSTAT_ERROR callback return codes, and DKIM_STAT_CBERROR return code. Suggested by Chris Behrens of Concentric Network Corporation. LIBDKIM: Add dkim_minbody() to determine how much more body text is required to satisfy canonicalizations. LIBDKIM: Add dkim_gethandlingstr() and dkim_getpolicystr() for translation of SSP handling and policy codes into printable strings. LIBDKIM: Add _FFR_PARSE_TIME, adding a utility function that can be used to detect that the timestamp on a signature and the value of the Date: header wildly differ. Incomplete. LIBDKIM: If a message comes in with no properly-formed sender headers, dkim_eoh() now renders the DKIM handle unusable by later data processing calls. LIBDKIM: Fix arithmetic in dkim_sig_expired(). LIBDKIM: In dkim_eoh_verify(), check for a NULL user pointer return from rfc2822_mailbox_split() (was previously only checking for an error code or NULL domain). Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1819489: Fix signature header name check in dkim_header(). Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1819559: Fix key granularity processing. LIBDKIM: Fix bug #SF1819571: More robust processing of "s=" in keys. LIBDKIM: Fix bug #SF1819607: Allow "t=" and "x=" values up to 64 bits since RFC4871 requires at least 40. LIBDKIM: Fix bug #SF1820017: Don't accept signatures with no "v=" tag. LIBDKIM: Fix bug #SF1820060: The value of "q=" may be a colon-separated list of values to parse. LIBDKIM: Fix bug #SF1820080: The value of "i=" may be quoted-printable so do appropriate decoding. LIBDKIM: Fix bug #SF1820123: "simple" body canonicalization must contain at least CRLF. LIBDKIM: Fix bug #SF1820370: More graceful handling of grossly malformed signature headers. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1822287 and SF1822295: Update policy check code to use the draft-ietf-dkim-ssp-01 algorithm. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1822329: In dkim_get_policy(), check for and handle error returns from the subordinate lookup functions. Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1822331: Use consistent return codes in dkim_get_policy_dns(). Problem noted by Chris Behrens of Concentric Network Corporation. LIBDKIM: Fix bug #SF1832703: When looking for headers to canonicalize during verification, disregard spaces between the header name and the colon (":") character. Problem noted by James Sargent of AOL. LIBDKIM: Fix bug #SF1838826: Several fixes with respect to processing key and policy flags. Problems noted by Marc Martinec. LIBDKIM: Feature request #SF1821005: Add dkim_getdomain(), an accessor function for dkim_domain. Requested by Chris Behrens of Concentric Network Corporation. Activate _FFR_QUERY_CACHE (Feature request #SF1675359) and _FFR_SELECT_SIGN_HEADERS. 2.3.2 2007/10/19 Fix bug #25896: Fix a bug in parsing of "RemoveARFrom". LIBDKIM: Fix a bug in the key reuse block of dkim_get_key() which assumed that a domain and selector match guaranteed a copied key and key tag list. LIBDKIM: Fix bug #SF1812687: Fix handling check in dkim_get_policy(). Patch from Daniel Black. 2.3.1 2007/10/12 Fix header loss problem in test mode. Fix bug #SF1808886: Handle missing or empty test inputs more gracefully. Based on a patch from Kaspar Brand. Fix bug #SF1808881: Check various integer conversions for negative, overflow or inappropriate values. Suggested by Kaspar Brand. Feature request #SF1809239: Restore performance of test mode on large messages. Requested by Kaspar Brand. Patch #SF1811132: Include <stdlib.h> in test.c for malloc() prototype. Patch from Daniel Black. BUILD: Patch #SF1810712: Correct default location for the Tre regular expression library. Suggested by Daniel Black. 2.3.0 2007/10/06 Add "UseSSPDeny" configuration option which causes the filter to reject messages which are determined to be suspicious according to the new draft-ietf-dkim-ssp-01, and whose sending domains advertise a recommended handling of "deny", and whose SSP records are not in "test" mode. Add "MaximumSignedBytes" configuration option limiting the number of bytes of the message body to be signed. Add "-t" command line option for reading an RFC2822-formatted message from a named file and attempting to evaluate it, "-F" command line option for using a fixed signing time, and "-v" command line option for requesting verbose output. Finally, new configuration option "StrictTestMode" asserts that all lines of input must be CRLF-terminated. Based on patches from Kaspar Brand. Add "TestPublicKeys" setting for instructing libdkim to read public keys from a file, for use during automated testing. Based on a patch from Jeff Barry. When using _FFR_QUERY_CACHE, periodically report cache activity statistics. Don't arbitrarily suppress signing of already-signed messages. Fix bug #25728: When "AutoRestart" is in use, try to remove the socket (if it's a UNIX domain socket) prior to trying to start the child. LIBDKIM: Add dkim_getmode() function. LIBDKIM: Fixes to policy evaluation in dkim_policy(). Based on a patch from Jeff Barry. LIBDKIM: Patch #SF1796687: Add DKIM_LIBFLAGS_ACCEPTV05 which causes the library to accept signatures with version strings of "0.5", i.e. those based on later versions of the DKIM draft specification. This does not change any other part of signature validation or canonicalization, only the version string test. Suggested by Jim Fenton of Cisco. LIBDKIM: When closing canonicalizations, flush the temporary files rather than closing them so that things like dkim_reportinfo() return useful descriptors. Close the temporary files in dkim_canon_free() only. Problem noted by Jeff Barry. LIBDKIM: Fix variable argument processing by merging dkim_error() and dkim_verror(). The previous code was causing segmentation faults on selected operating systems. Activate the following FFRs: _FFR_KEY_REUSE _FFR_SET_REPLY 2.2.1 2007/09/07 Insert VBR headers at the top rather than appending them to be sensitive to legacy DomainKeys operations. Patch from S. Moonesamy of Eland Systems. Discontinue use of MAXHOSTNAMELEN as the maximum size of a hostname since some vendors set it to 64 (maximum size of a DNS label) and some to 256 (maximum size of an FQDN). Instead, define and use DKIM_MAXHOSTNAMELEN (256). Problem noted by Jeff Barry. LIBDKIM: Rename and update the default_signhdrs and default_skiphdrs arrays to match what's in RFC4871 section 5.5 SHOULD and SHOULD NOT lists. LIBDKIM: Apply DKIM_OPTS_SKIPHDRS only when signing. LIBDKIM: Add missing entries to prv_results, and add a dkim_getresultstr() function for translating DKIM_STAT result codes. Patch from Kaspar Brand. Fix bug #SF1785624: Resolve build problem introduced in previous version when NETINET6 is in use. Reported by Andrew Benham. Fix bug #SF1786033: Resolve build problem introduced in previous version affecting later versions of Solaris. Reported by Andy Fiddaman. Fix bug #SF1787473: Initialize the default "-i" list properly (given changes made in the previous version) so that mail from localhost still gets signed. Reported by Graham Murray. 2.2.0 2007/08/30 Change format of the peerfile, internal and external host lists, etc. to allow exclusion entries. See the man page for additional details. Amend "-u" to include the ability to name a group into which the filter process should be placed. Feature request #SF1783155: Make keylist pattern matching case-insensitive. LIBDKIM: Handle CNAMEs properly when using the standard resolver. Problem noted by Jim Fenton of Cisco. LIBDKIM: Fix bug #SF1782076: Adjust signature header wrapping logic so that a "b=" against the margin gets wrapped consistently when signing and verifying. Reported by Kaspar Brand. 2.1.2 2007/08/22 LIBDKIM: At the end of dkim_eoh_verify(), don't overwrite any existing descriptive error text before returning on verification errors. Problem noted by Andy Fiddaman. LIBDKIM: Remove redundant assertion of length limits in dkim_canon_bodychunk(). The code in dkim_canon_write() has it correct, so use that instead. Problem noted by Mark Martinec. LIBDKIM: Fix bug #SF1777332: Fix "relaxed" body canonicalization. Some code from the older implementation was still present conflicting with the newer code. Reported by Andrey Chernov. 2.1.1 2007/08/13 Fix bug #SF1743896 (reopened): Don't crash if a From: header with no domain is found. Patch from Andy Fiddaman. LIBDKIM: Fix type mismatches regarding restricted lengths. Problems noted by Jukka Salmi. LIBDKIM: Fix bug #SF1771520: Return an error from dkim_policy() if the sender's domain name could not be determined. Patch from Andy Fiddaman. 2.1.0 2007/08/10 Update to new (draft version 06) Authentication-Results: header format. Do an SSP query for any message that didn't either succeed verification or cause some kind of internal error, not just those that failed to verify. Tighten up the logic used when checking header space allocation. LIBDKIM: Heavy cleanup of dkim_eoh() and dkim_eom() via patches from Chris Behrens of Concentric Network Corporation. LIBDKIM: Add more fine-grained state control enforcing the order in which the message processing functions are called. There was previously a hole which would allow, for example, more headers to be submitted after a call to dkim_eoh() if a prescreen callback returned a "tryagain" result. LIBDKIM: Add dkim_sig_getidentity(). LIBDKIM: Fix bug #SF1769270: Use the default query type to retrieve signing policy for unsigned messages. LIBDKIM: Fix bug #SF1769445: Return the correct policy result from dkim_get_policy_dns() rather than always returning an empty string. Patch by Andy Fiddaman. LIBDKIM: Amend dkim_sig_getcanonlen() to include a parameter which receives the signature length limit, if any. LIBDKIM: Restore proper value to dkim_bodylen. Problem noted by Jukka Salmi. LIBDKIM: Don't inexplicably clear sig_signalg. Problem noted by Jukka Salmi. Feature request #SF1761475: Add "ClockDrift" configuration option for tolerating out-of-synch clocks. Suggested by Kaspar Brand. Feature request #SF1761481: Add "SyslogSuccess" configuration option for logging successful operations rather than just errors or other informational messages. Suggested by Kaspar Brand. Feature request #SF1769888: Amend dkim_policy() to be able to return the policy type retrieved from the sending domain. Also add dkim_getpresult() and associated other code to get additional policy evaluation information. Requested by Andy Fiddaman. 2.0.2 2007/08/03 Fix bug #SF1766313: Make configuration handling 64-bit friendly. Other 64-bit portability issues also addressed. Problems noted by Chris Box. Add _FFR_DNS_UPGRADE which establishes a second libar instance in TCP mode for handling truncated UDP replies. Also make some minor fixes in the key and policy DNS lookup functions to provide more consistent handling of such responses. Problems noted by Kaspar Brand; code is still experimental. 2.0.1 2007/08/02 Fix bug #SF1760481: Make header space allocations fully dynamic rather that establishing compile-time per-header limits. There is still an overall cap, however. Suggested by Ralf Hildebrandt. LIBDKIM: Fixes inside _FFR_KEY_REUSE. 2.0.0 2007/07/27 Remove all support for versions older than RFC4871. Older statistics databases will not be incompatible with the new code since version information is no longer included in the record format. Add "Resent-Sender" and "Resent-From" to the list of headers checked to determine whether or not the message should be signed or verified. Report an authentication result of "permerror" when the message can't be verified for syntax or other non-crypto reasons. New configuration file item "RemoveARFrom" allows specification of hostnames/domains whose existing Authentication-Results: headers should be removed. Also add "RemoveARAll" which allows selection of whether all such headers should be removed or only those containing a DKIM result. New configuration file item "RemoveOldSignatures" deletes existing signatures when signing. Fix bug #SF1743896: Don't crash if a From: header with no domain is found. Patch from Andy Fiddaman. Fix bug #SF1743964: Remove the pid file on shutdown or startup failure. Patch from Mike Markley. LIBAR: Plug descriptor and memory leaks in ar_shutdown(). LIBDKIM: Rework _FFR_VBR code to prepare it for extraction into an independent library. LIBDKIM: The key and policy lookup callbacks must now return a DKIM_CBSTAT constant so that they can have their corresponding libdkim functions return DKIM_STAT_CBTRYAGAIN if desired. Suggested by Chris Behrens of Concentric Network Corporation. LIBDKIM: Add _FFR_DIFFHEADERS which adds dkim_diffheaders() to enable the caller to search for headers that may have been munged in transit thus causing a verification failure. LIBDKIM: Feature request #SF1473131: Overhaul data structures, functions and documentation to allow fine-grained handling of messages bearing multiple signatures. This included the following changes: o Extend draft-ietf-dkim-ssp-00 support to cover multiply-signed messags. o Introduce DKIM_SIGERROR type/constants for associating an error code with each individual signature. o New libary flag DKIM_LIBFLAG_DELAYSIGPROC delays all signature processing until dkim_eom(). o New libary flag DKIM_LIBFLAG_EOHCHECK causes dkim_eoh() to return an error if it was unable to find any valid signatures when verifying. o Add new DKIM_CANON data type, referring to a parallel canonicalization required for signature generation or verification. o New function dkim_getsiglist() retrieves an array of DKIM_SIGINFO handles referring to all of the signatures discovered on a message. o New function dkim_getsignature() retrieves a single DKIM_SIGINFO handle which is the one libdkim will use to return its final result. o New function dkim_sig_getflags() to retrieve flags attached to a signature handle after processing. o New function dkim_sig_geterror() to retrieve the error code associated with a signature handle after processing. o New function dkim_sig_getbh() to retrieve the body hash test result on a signature after processing. o New function dkim_set_final() sets a user-provided callback called by dkim_eom() to do any final processing the caller may desire. o New function dkim_sig_process() manually executes verification of a signature, for use from within the prescreen or final callbacks. o Rename dkim_getcanonlen() to dkim_sig_getcanonlen(), dkim_getsigntime() to dkim_sig_getsigntime(), dkim_getselector() to dkim_sig_getselector(), dkim_getsigndomain() to dkim_sig_getdomain(), dkim_getsignalg() to dkim_sig_getsignalg() and dkim_getkeysize() to dkim_sig_getkeysize() as they now act on a specific signature rather than on an entire message. o The user-provided key and policy lookup functions must now accept a DKIM_SIGINFO handle as an additional parameter. o dkim_reportinfo() and dkim_ohdrs() now also require a DKIM_SIGINFO handle as an additional parameter. LIBDKIM: Fix signal logic in dkim_cache_read_unlock(). Patch from Chris Behrens of Concentric Network Corporation. LIBDKIM: Add _FFR_KEY_REUSE which avoids doing duplicate key lookups if the same key is used on two signatures in the same message. Suggested by Chris Behrens of Concentric Network Corporation. LIBDKIM: Changed prototype for dkim_policy() to reflect the new code. Remove _FFR_FLUSH_HEADERS. The functionality it provided is now accessed via the new configuration options described above. Activate _FFR_HASH_BUFFERING. BUILD: More unit tests. 1.2.0 2007/06/26 Update sender signing policy (SSP) code to match the new draft-ietf-dkim-ssp-00 specification syntax. In doing so, remove _FFR_ALLMAN_SSP_02. If "-u" is specified, call initgroups() and setgid() as well. Reported by Mike Markley; based on a patch from S. Moonesamy of Eland Systems. Fix bug #SF1738354: Add "L" data to CMDLINEOPTS. Reported by Andrey Chernov. 1.1.0 2007/06/15 Add a new option to "-L" and "Minimum" allowing a specific maximum number of bytes of appended, unsigned text. Suggested by Philip Guenther. Documentation and build patches from Gregory Shapiro, and documentation patches from Steve Jones of Bank of America. Under _FFR_VBR, if dkim_vbr_query() returns an error, report the error and then don't add the header. Reported by S. Moonesamy of Eland Systems. Fix bug #24586: Allow "-?" just to get the usage message; also hint at such if the filter is invoked with no arguments. LIBDKIM: Define DKIM_STAT_CBTRYAGAIN and DKIM_CBSTAT_TRYAGAIN. BUILD: More unit tests. 1.0.0 2007/05/23 First release after DKIM issued as a standard (RFC4871). Remove the "-v" command line option and "Version" configuration file item, which permitted selection of the signing version. Remove "nowsp" canonicalization option. LIBDKIM: Define DKIM_VERSION_RFC4871 and make it the default signing version. LIBDKIM: Remove DKIM_CANON_NOWSP and DKIM_VERSION_ALLMAN_BASE_00 which defined it. Gradually, support for old versions will be phased out. 0.8.1 2007/05/22 Portability fixes for Solaris. LIBDKIM: Define DKIM_CBSTAT_* constants which are to be used as return values from callbacks. Also define new status values DKIM_STAT_CBREJECT and DKIM_STAT_CBINVALID indicating results from callbacks back to the calling applications. Suggested by James Sargent of AOL. LIBDKIM: Slightly nicer wrapping of "b=", "bh=" and "z=" in dkim_getsighdr(). LIBDKIM: Define callbacks with respect to the DKIM library handle rather than each signing/verifying instance. Suggested by James Sargent of AOL. BUILD: Reference libssl and libcrypto in dkim-filter/Makefile.m4 rather than in the template site.config.m4 file since it's always required anyway. BUILD: Fix man page entry in dkim-filter/Makefile.m4. 0.8.0 2007/05/17 Add a dkim-stats(8) man page. Contributed by Mike Markley. Add "SignatureTTL", "Diagnostics" and "AlwaysSignHeaders" options to the configuration file and man page. Add _FFR_ZTAGS for optionally saving diagonstic information when a signature fails if the signature contained a "z=" tag. Still more minor fixes in _FFR_STATS related to DB versions. Feature request #SF1473129: Split configuration file details into their own man page. LIBDKIM: Still more minor fixes in _FFR_QUERY_CACHE related to DB versions. Reported by Ben Lentz. LIBDKIM: Remove dkim_getidentity(), as the function it provides isn't part of DKIM. Instead, provide that functionality in dkim-filter. LIBDKIM: Add a new option DKIM_OPTS_ALWAYSHDRS which allows specification of a list of header names which should always be included in signature header lists whether or not the headers were actually present, preventing them from being added downstream before verification. LIBDKIM: Add a new option DKIM_OPTS_SIGNATURETTL which allows the caller to assert a time-to-live on signatures generated. This causes the "x=" tag to appear in signatures. LIBDKIM: Add a new library flag DKIM_LIBFLAGS_ZTAGS which causes signatures generated to include the original header set encoded for transport so the verifier can use it to diagnose verification failures. This causes the "z=" tag to appear in signatures. LIBDKIM: Add dkim_ohdrs() which extracts the sender's set of headers if a "z=" tag was present in the signature. This can then be used by the caller to diagnose verification failures for signatures which contain them. LIBDKIM: Add the first large (and yet not the smallest) change to support multiple signatures. There's now a method via a few callbacks to give the caller access to the signatures discovered by the end-of-headers callback. The caller can analyze the signatures, reorder them, or flag some to be ignored. After reordering, the library still simply runs with the first that appears to be syntactically valid; actual processing of multiple signatures after the re-ordering will be in an upcoming release. LIBDKIM: _FFR_QUERY_CACHE now only covers DNS key lookups, not all key lookups. LIBDKIM: Move the method-specific policy lookup functions into their own new files, dkim-policy.c and dkim-policy.h. LIBDKIM: Slightly nicer wrapping of "h=" in dkim_getsighdr(). LIBDKIM: Add dkim_set_signer() for specifying the message's signer for signature generation. BUILD: More unit tests. Activate the following FFRs: _FFR_QUARANTINE _FFR_REPORTINFO 0.7.1 2007/05/09 More minor fixes in _FFR_STATS related to DB versions. Based on a patch by Graham Murray. LIBDKIM: More minor fixes in _FFR_QUERY_CACHE related to DB versions. LIBDKIM: Use read-write locks instead of a mutex in _FFR_QUERY_CACHE when appropriate. LIBDKIM: When using _FFR_QUERY_CACHE with recent enough versions of the DB library, tell the library to use the same temporary directory as libdkim is using. BUILD: Fix bug #SF1715265: Correct a typo which caused libdkim to fail to build against the asynchronous resolver library. Reported by Andy Fiddaman. 0.7.0 2007/05/03 Several more fixes in _FFR_STATS related to DB versions. LIBDKIM: Add support for optional callbacks to do key and policy lookups using an API provided by the caller rather than using DNS directly. New functions dkim_set_key_lookup() and dkim_set_policy_lookup() set these callbacks. Also add dkim_getdomain() and dkim_getselector() utility functions so those callbacks can extract the data required to make the queries. Note that these will probably change slightly when support for multiple signatures is finally added. Suggested by James Sargent of AOL. LIBDKIM: Fix bug #SF1708756: Set dkim_partial earlier during signing so that the "l=" portion is included in the canonicalized signature header. Reported by Andrey Chernov. LIBDKIM: Algorithm and initialization fixes in policy retrieval found by the new unit tests. LIBDKIM: Several more fixes in _FFR_QUERY_CACHE related to DB versions. LIBDKIM: Fix bug #SF1706248: Rewrite dkim_getidentity() so it returns a more sane value for the sender in all cases. Another utility function will be added later for obtaining the signer's identity. Reported by Andrey Chernov. BUILD: Overhaul the build scripts so that all the user editing is done in devtools/Site/site.config.m4 rather than in each individual directory's Makefile.m4. Include a template for this purpose. BUILD: Begin a collection of automated unit tests. Activate the following FFRs: _FFR_LOG_SSL_ERRORS _FFR_MULTIPLE_KEYS _FFR_OMIT_HEADERS _FFR_QUERY_FILE _FFR_SET_DNS_CALLBACK (Feature request #SF1473171) 0.6.6 2007/04/25 Update _FFR_SELECT_CANONICALIZATION for split canonicalization methods. Add _FFR_STATS, creating an optional database for storing pass/fail statistics per domain over time, and a command-line tool for querying the database contents. Requires Sleepycat DB. LIBDKIM: Patch #SF1705155: Fixes in "relaxed" header canonicalization code. Problem noted by Ben Lentz. LIBDKIM: Add _FFR_HASH_BUFFERING, experimental code that adds a layer of buffering in front of dkim_canonwrite() so the SHA hashing functions are called less often. LIBDKIM: Only call dkim_flush_blanks() when it will actually do something. LIBDKIM: Fix bug #SF1706530: Call EVP_cleanup() in dkim_close(). Suggested by Andy Fiddaman. LIBDKIM: Inside _FFR_QUERY_CACHE, fix cursor operations when compiled against very old versions of Sleepycat DB. LIBDKIM: When opening the database with _FFR_QUERY_CACHE, make sure the library is allowed to create the database. 0.6.5 2007/04/20 Further fixes in POPAUTH code for backward-compatibility with older versions of Sleepycat DB. Memory corruption fixes inside _FFR_MULTIPLE_KEYS. Reported by S. Moonesamy of Eland Systems. Re-implement _FFR_OMIT_HEADERS using the new libdkim option (see below). Return DKIM_STAT_SYNTAX from dkim_eoh() if an empty "d", "s" or "b" tag is discovered on a signature. Export most internal header lists so callers can use them. Fix bug #SF1702708: Don't start in signing mode without at least one key and selector specified. Reported by Andrey Chernov. Feature request #SF1675359: Add _FFR_QUERY_CACHE, allowing optional caching on-disk of key and policy records retrieved via DNS to reduce the number of round trips to the nameserver. Requires Sleepycat DB. Requested by Jim Popovitch. Portability fixes for Solaris. LIBDKIM: Enforce mandatory headers in dkim_eoh(). LIBDKIM: Add dkim_close() for library shutdown. LIBDKIM: Add option DKIM_OPTS_SKIPHDRS to skip headers that should not be signed or verified. LIBDKIM: Initialize dkiml_fixedtime. 0.6.4 2007/04/16 Further fixes in POPAUTH code. Based on patches from John Merriam. Modify the output of "-V" further so it also includes active code options (as opposed to just FFRs). When linked against libdk, get additional forensic data from dk_geterror() whenever possible. Changes to _FFR_MULTIPLE_KEYS: Add a domain field in the file, and try a couple of filename extensions before giving up when reading private keys. Add more calls to dkim_error() for additional diagnostic information around the DNS queries. Fix bug #SF1700333: Remove the dkim_sig_signerok() check as it actually detects (and rejects) third-party signatures. The code is still there, just disabled, in case we want to use it after SSP addresses that question. Reported by James Sargent of AOL. Add _FFR_CAPTURE_UNKNOWN_ERRORS which quarantines jobs that cause unexpected results from dkim_eom() to allow more detailed analysis. LIBAR: Fix bug #SF1537476: Update to support IPv6 nameservers. 0.6.3 2007/04/06 Avoid deadlock errors in the POPAUTH code by protecting that code with a mutex as well. Also, "l_end" should be "l_len". Problems noted by John Merriam. Fix bug #SF1693248: Add support for sendmail 8.14.x and its "preserve leading spaces" option. Based on a patch from Andy Fiddaman. Fix bug #SF1693249: If dkim_eoh() returns DKIM_STAT_NOSIG and then the caller calls dkim_eom() to get policy (which the documentation says is acceptable), assertion failures were tripped because the SHA hash(es) weren't initialized and dkim_domain wasn't set. Reported by Andy Fiddaman. LIBDKIM: Add _FFR_QUERY_FILE for getting keys and policies from a flat text file rather than DNS for offline or automated testing. Based on a patch from Jeff Barry. LIBDKIM: New option DKIM_OPTS_FIXEDTIME to use a specific time when generating signatures, to be used for offline or automated testing. Based on a patch from Jeff Barry. LIBDKIM: Fix bug #SF1691659: Fix a type mismatch so that RSA_sign() returns reasonable results on 64-bit platforms. Reported by Andy Fiddaman. LIBAR: Fix bug #SF1694130: Block signals that should be caught and handled elsewhere, such as in libmilter. Patch by Andy Fiddaman. 0.6.2 2007/03/30 Don't start if you're in signing mode and no selector was chosen on the command line or in the configuration file. Don't start if the version of OpenSSL used to compile libdkim is not the same as the one used to compile the filter. Print the version of OpenSSL in use when "-V" is used on the command line. Add _FFR_VBR, enabling optional support for the Vouch By Reference domain reputation proposal. Add "BodyLengths" configuration file option which adds the "l=" parameter when signing messages so re-mailers (e.g. MLMs) which append text to the message won't interfere with successful verification. Fix bug #SF1689101: Fix a minor error in argv processing when _FFR_OMIT_HEADERS was in use. LIBDKIM: Change DKIM_SIGN_DEFAULT to point to "rsa-sha256" if it's available. LIBDKIM: Add dkim_ssl_version(). LIBDKIM: Fix bug #SF1681632: Fix a bug in header selection when signing. Messages verified just fine, but some headers could accidentally be omitted during signing. From a patch for bug #SF1541490 for dk-milter, reported by Mark Martinec; essentially the same bug existed in libdkim. 0.6.1 2007/03/07 Load the -C values from the configuration file if -C wasn't present on the command line. Previously, they were ignored. Fix bug #SF1477211: Add an appropriate Authentication-Results: header when a signature uses a hash which the matching key does not authorize. Feature request #SF1497802: Add _FFR_QUARANTINE, allowing optional quarantining of messages which fail verification or policy checks. Feature request #SF1605766: To reduce spurious logging, don't set mctx_status to DKIMF_STATUS_NOSIGNATURE unless the signature was missing on a message from a domain that claims it signs everything. LIBDKIM: Fix a verification version auto-detection bug that was causing some false negatives. LIBDKIM: Fix bug #SF1672787: Fix an additional corruption bug in dkim_getsighdr(). LIBDKIM: Select the correct signature to replay into canonicalization, rather than always using the first one. Problem noted by James Sargent of AOL. 0.6.0 2007/03/01 Bring up to currency with "ietf-base-10" which is probably the version that the IETF will issue as an RFC. This includes: - signature "q=" option delimiter is now "/", and the default value is now "dns/txt" - if both "t=" and "x=" are present in a signature, make sure the former is less than the latter - disregard signatures that appear to have been generated in the future - support for draft and final versions of "v=" tags in both keys and signatures Activate _FFR_VERIFY_DOMAINKEYS. Complete support for DKIM_QUERY_FILE for use in debugging and testing. Fix a number of minor bugs in signature header generation which could cause corruption and thus validation and/or syntax errors. Fix bug #SF1507535: Fix an FFR-related build issue. Reported by Frederik Pettai. Patch #SF1505401: Add _FFR_OMIT_HEADERS, copied from dk-milter. This will probably be replaced later by an extension to dkim_options(). Patch provided by Ben Lentz. LIBDKIM: Fix bug #SF1512860: Before returning DKIM_STAT_NOSIG from dkim_eom(), try to retrieve the sending domain's policy. LIBDKIM: Fix bug #SF1608314: Fix processing of config file items "Userid" and "Mode". Patch from John Villalovos. LIBDKIM: Add dkim_geterror() to retrieve additional diagnostic data from the API when a function call returns DKIM_STAT_INTERNAL or something else whose cause isn't readily apparent. LIBDKIM: Remove an extraneous pointer type in the parameter list for dkim_sign(). Reported by Jeff Barry. 0.5.2 2006/09/18 Fix bug #SF1537905: If necessary, try again to get the job ID in mlfi_eom() in case it came down later than expected (e.g. postfix). Suggested by Mark Martinec. Fix a couple of minor build problems. Fix bug #SF1559406: Change MAXHEADER to 4096. LIBDKIM: Fix bug #SF1544301: Fix an issue with processing a message which has trailing spaces on its last line. Reported by Mark Martinec. LIBDKIM: Fix bug #SF1558014: Confirm the body hash in the signature matches the actual body hash when verifying. Reported by Mark Martinec. LIBDKIM: Add preliminary support for the draft-allman-dkim-ssp-02 specification as _FFR_ALLMAN_SSP_02. LIBAR: Adapt to the post-bind4 resolver API. Problem reported by S. Moonesamy of Eland Systems. 0.5.1 2006/06/14 Add compile-time option _FFR_ANTICIPATE_SENDMAIL_MUNGE which attempts to replicate some header rewriting the sendmail MTA will do, which otherwise prevents signature validation from succeeding. Problem noted by Ken Jones. Add support for "ietf-base-02" signing mode (which is really synonymous with "ietf-base-01"). LIBDKIM: Report a syntax error when a signature header arrives with any required fields missing. 0.5.0 2006/05/19 Fix an assertion failure under _FFR_SELECT_SIGN_HEADERS. Reported by S. Moonesamy of Eland Systems. Under _FFR_REPORTINFO, only send reports when verification failed. There are other failure modes, but that's the only one for which reports are useful. Problem noted by Michael Thomas of Cisco. RFC2822 doesn't require any recipient headers, so remove those checks inside _FFR_REQUIRED_HEADERS. Fix bug #SF1481303: Don't verify DomainKeys signatures while in signing mode. Reported by S. Moonesamy of Eland Systems. Activate _FFR_MACRO_LIST (adds the "-M" command line option) and _FFR_EXTERNAL_IGNORE_LIST (adds the "-I" command line option). 0.4.1 2006/05/02 Include the list of supported DKIM versions in the output of "-V". Feature request #SF1238442: Add _FFR_VERIFY_DOMAINKEYS which will verify DomainKey signatures, if present. Requires libdk, which is available in the dk-milter package. Feature request #SF1453565: Add _FFR_SELECT_SIGN_HEADERS which permits specification of which headers to sign. Add _FFR_SET_DNS_CALLBACK which allows registration of a callback per-handle which is called periodically while waiting for DNS responses. LIBDKIM: Return an error if the signing function returned success but also reported a zero-length signature. Reported by S. Moonesamy of Eland Systems. 0.4.0 2006/04/18 Add preliminary support for IETF DKIM draft 01. "rsa-sha256" support was already added, but this also adds support for the "bh" (body hash) tag in signatures. Add "-v" command line switch to select DKIM version to use when signing. Add "-x" command line switch to specify a configuration file to read and parse. LIBAR: Fixes regarding retransmissions. 0.3.2 2006/04/05 Don't remove the wrong "b=" when canonicalizing the signature header during verification. Problem noted by Michael Thomas of Cisco. Properly process empty values in parameter sets. Problem noted by Michael Thomas of Cisco. 0.3.1 2006/03/19 Report the size of the key on successful verifications in the Authentication-Results: header. Fix bug #SF1453591: Tolerate empty strings in dkim_process_set(), and just apply defaults. LIBDKIM: Add dkim_getkeysize(), dkim_getsignalg(), dkim_getsigntime(). 0.3.0 2006/03/15 Add preliminary support for "rsa-sha256" signatures. Rearrange command line arguments somewhat. Include the list of supported canonicalization and signing algorithms in the output when "-V" is specified. Fix an intermittent crash condition caused by an uninitialized variable. Add _FFR_LOG_SSL_ERRORS to log any queued SSL error messages before releasing a message from the filter. 0.2.3 2006/03/03 Add a "testing" comment when the key or policy used to verify a message is marked with a test flag. Flush the base64 output stream before sending the reports under _FFR_REPORTINFO so that the reports don't contain truncated data. Discovered by Tony Hansen of AT&T. Fixes in processing of signature headers that contained extraneous spaces. Reported by Tony Hansen of AT&T. Fix bug #SF1442606: Clone the configuration string before parsing it so that "ps" doesn't show weird output. 0.2.2 2006/01/24 Evaluate the key granularity honouring "*" as a wildcard. Add _FFR_SET_REPLY which requests a more useful SMTP reply code when instructing the MTA to temp-fail or reject messages. 0.2.1 2005/12/09 Further fixes to dkim_getsighdr(). Problem reported by Sung-hoon Choi of Dreamwiz. Plug a few small but definite memory leaks. Fix bug #SF1373746: Repair a _FFR_SELECT_CANONICALIZATION build problem introduced in the previous release. Reported by S. Moonesamy of Eland Systems. 0.2.0 2005/12/02 Update for revised ESTG draft. Mainly this involved changing the "nowsp" canonicalization to "relaxed", and allowing specification of different canonicalizations for header and body. Don't allow the header to end with "\n\t" in dkim_getsighdr(). Problem reported by Sung-hoon Choi of Dreamwiz. Report "neutral" instead of "fail" for failed verifications when they key was marked as being in test mode. Patch from Sung-hoon Choi of Dreamwiz. Allow "-d" to specify a file from which domain names should be read, and allow domain names to contain wildcards. Fix bug #SF1243980: An empty key granularity matches nobody. Reported by Jim Fenton of Cisco. LIBAR: Fix bug #SF1282755: Fix a build issue introduced in the last release. Reported by Fredrik Pettai. 0.1.1 2005/07/21 Prevent a garbage pointer free() in dkim_free(). Reported by S. Moonesamy of Eland Systems. Fix bug #SF1241118: Don't add an Authentication-Results: header for messages which are unsigned and come from a domain that doesn't advertise a signs-all policy. Reported by S. Moonesamy of Eland Systems. Report "neutral" instead of "fail" for domains advertising test mode in their policies. Feature request #SF1238617: Add a compile-time option to map smfi_insheader() to smfi_addheader() on machines with older MTA and libmilter versions. 0.1.0 2005/07/13 Initial open source release.
Upload File
Create Folder