Package: dkimpy-milter Version: 1.2.1-1~bpo10+1 Severity: normal Tags: upstream
I tried sending a mail with "From: 😸@43-1.org", "To: 😸@43-1.org", but dkimpy-milter didn't sign the message (it signs other mails) and the following error appeared in the log: +--- | dkimpy-milter[454]: DKIM: The From header field MUST be signed +--- If I use "From: {us-ascii-only}@43-1.org", "To: 😸@43-1.org", then the DKIM-Signature exists, but doesn't cover the "To" field: +--- | DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=43-1.org; | i=@43-1.org; q=dns/txt; s=2019; t=1598699673; h=subject : mime-version | : content-type : content-transfer-encoding : message-id : from : date | : from; bh=UjN96cC7omIGsgVag4PTJFDc2e+vxauhwCLS/rjCqvg=; +--- It looks like dkimpy-milter silently discards header fields containing Unicode when signing. The same might happen when verifying mails (dkimpy-milter couldn't verify a signature where the signed "To" field contained unicode, while Spamassassin's DKIM check reported DKIM_VALID; not including the header when verifying the signature might be a possible explaination). Ansgar -- System Information: Debian Release: 10.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.7.0-0.bpo.2-cloud-amd64 (SMP w/1 CPU core) Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages dkimpy-milter depends on: ii adduser 3.118 ii python3 3.7.3-1 ii python3-authres 1.2.0-1~bpo10+1 ii python3-dkim 1.0.3-1~bpo10+1 ii python3-dns 3.2.0-2 ii python3-dnspython 1.16.0-1 ii python3-milter 1.0.3-3 ii python3-nacl 1.3.0-2 ii python3-pkg-resources 40.8.0-1 dkimpy-milter recommends no packages. Versions of packages dkimpy-milter suggests: ii lsb-base 10.2019051400 ii postfix 3.4.14-0+deb10u1 -- Configuration Files: /etc/dkimpy-milter.conf [Errno 2] No such file or directory: '/etc/dkimpy-milter.conf' /etc/dkimpy-milter/dkimpy-milter.conf changed [not included] -- no debconf information