<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: qmail and DKIM</title>
	<atom:link href="http://patchlog.com/security/qmail-and-dkim/feed/" rel="self" type="application/rss+xml" />
	<link>http://patchlog.com/security/qmail-and-dkim/</link>
	<description>patches 'n hacks</description>
	<pubDate>Sun, 12 Oct 2008 14:00:22 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: j</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7544</link>
		<dc:creator>j</dc:creator>
		<pubDate>Thu, 12 Jun 2008 16:09:57 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7544</guid>
		<description>Mihai, could i get your contact info? real time chat? email?</description>
		<content:encoded><![CDATA[<p>Mihai, could i get your contact info? real time chat? email?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7543</link>
		<dc:creator>Mihai</dc:creator>
		<pubDate>Thu, 12 Jun 2008 11:55:02 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7543</guid>
		<description>I have this running without any problems on a freebsd 5.3</description>
		<content:encoded><![CDATA[<p>I have this running without any problems on a freebsd 5.3</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: j</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7542</link>
		<dc:creator>j</dc:creator>
		<pubDate>Thu, 12 Jun 2008 09:59:07 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7542</guid>
		<description>i'm having a very difficult time implimenting DKIM into my FreeBSD 6.2 server with OpenSSL 0.9.7, i've installed 0.9.8 from ports to /usr/local and have tried all of the above.. but no luck. DKIM/QMAIL/FREEBSD has 0 documentation..</description>
		<content:encoded><![CDATA[<p>i&#8217;m having a very difficult time implimenting DKIM into my FreeBSD 6.2 server with OpenSSL 0.9.7, i&#8217;ve installed 0.9.8 from ports to /usr/local and have tried all of the above.. but no luck. DKIM/QMAIL/FREEBSD has 0 documentation..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: landlord</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7240</link>
		<dc:creator>landlord</dc:creator>
		<pubDate>Wed, 21 May 2008 03:44:10 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7240</guid>
		<description>Very dangerous, if your small device get´s out of memory while running more than one signing processes.</description>
		<content:encoded><![CDATA[<p>Very dangerous, if your small device get´s out of memory while running more than one signing processes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: daniel gauthier</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7239</link>
		<dc:creator>daniel gauthier</dc:creator>
		<pubDate>Tue, 20 May 2008 12:41:18 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7239</guid>
		<description>performance tip: you can append "-p /dev/shm" to the mktemp command, it will reduce disk IO</description>
		<content:encoded><![CDATA[<p>performance tip: you can append &#8220;-p /dev/shm&#8221; to the mktemp command, it will reduce disk IO</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7227</link>
		<dc:creator>Mihai</dc:creator>
		<pubDate>Fri, 16 May 2008 06:42:59 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7227</guid>
		<description>you can create a symlink from libresolv-2.3.6.so to libresolv.so then run ldconfig and try to compile again</description>
		<content:encoded><![CDATA[<p>you can create a symlink from libresolv-2.3.6.so to libresolv.so then run ldconfig and try to compile again</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alex</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7226</link>
		<dc:creator>alex</dc:creator>
		<pubDate>Fri, 16 May 2008 03:39:23 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7226</guid>
		<description>well, it's my first time with make...

1. my makefile does look like this.

2. i browse the web and found that -lresolv searches for the library libresolv.so and that i have that libresolv-2.3.6.so in my /lib

3. I also have libcrypto, /usr/include/openssl...

4. I tried to go further with the error message and it says in (bad) english there's a problem converting negative value to unsigned int or char...
I look in dkimverify.cpp and all lines that are mentionned in my error message refer contains a "-1"... Hope this could help.

i forgot to say i am under Gentoo Linux.
Don't know if it really maters.

What can i check / do next ?</description>
		<content:encoded><![CDATA[<p>well, it&#8217;s my first time with make&#8230;</p>
<p>1. my makefile does look like this.</p>
<p>2. i browse the web and found that -lresolv searches for the library libresolv.so and that i have that libresolv-2.3.6.so in my /lib</p>
<p>3. I also have libcrypto, /usr/include/openssl&#8230;</p>
<p>4. I tried to go further with the error message and it says in (bad) english there&#8217;s a problem converting negative value to unsigned int or char&#8230;<br />
I look in dkimverify.cpp and all lines that are mentionned in my error message refer contains a &#8220;-1&#8243;&#8230; Hope this could help.</p>
<p>i forgot to say i am under Gentoo Linux.<br />
Don&#8217;t know if it really maters.</p>
<p>What can i check / do next ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7223</link>
		<dc:creator>Mihai</dc:creator>
		<pubDate>Thu, 15 May 2008 11:41:19 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7223</guid>
		<description>it seems like it's not using -lresolv 
your Makefile should look like this :
# libdkim makefile for UNIX
#

ifdef LINUX
CFLAGS  = -c
LFLAGS  =
LIBS    = -lcrypto -lresolv
else
...</description>
		<content:encoded><![CDATA[<p>it seems like it&#8217;s not using -lresolv<br />
your Makefile should look like this :<br />
# libdkim makefile for UNIX<br />
#</p>
<p>ifdef LINUX<br />
CFLAGS  = -c<br />
LFLAGS  =<br />
LIBS    = -lcrypto -lresolv<br />
else<br />
&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alex</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-7221</link>
		<dc:creator>alex</dc:creator>
		<pubDate>Thu, 15 May 2008 06:34:11 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-7221</guid>
		<description>Hi,

I tried this on my (french) server with libdkim 1.0.19 and i also have a error after
make LINUX=y

g++ -c -c dkim.cpp
g++ -c -c dns.cpp
g++ -c -c dkimbase.cpp
g++ -c -c dkimsign.cpp
g++ -c -c dkimverify.cpp
dkimverify.cpp: In function `unsigned int DecodeBase64(char*)':
dkimverify.cpp:221: attention : converting de valeur n�gative � -0x000000001 � vers � unsigned char �
(this lign is repeated about 30 times and...)
dkimverify.cpp: In function `bool ParseUnsigned(const char*, unsigned int*)':
dkimverify.cpp:846: attention : converting de valeur n�gative � -0x000000001 � vers � unsigned int �
dkimverify.cpp: In member function `int CDKIMVerify::ParseDKIMSignature(const std::string&#38;, SignatureInfo&#38;)':
dkimverify.cpp:1022: attention : converting de valeur n�gative � -0x000000001 � vers � unsigned int �
dkimverify.cpp:1050: attention : converting de valeur n�gative � -0x000000001 � vers � unsigned int �
dkimverify.cpp:1060: attention : converting de valeur n�gative � -0x000000001 � vers � unsigned int �
rm -f libdkim.a
ar cr libdkim.a dkim.o dns.o dkimbase.o dkimsign.o dkimverify.o
ranlib libdkim.a
g++ -c -c libdkimtest.cpp
g++ -olibdkimtest  \
       -L . libdkimtest.o -lcrypto  -ldkim
./libdkim.a(dns.o): dans la fonction � _DNSGetTXT(char const*, char*, int)�:
dns.cpp:(.text+0x32): r�f�rence ind�finie vers � __res_query �
dns.cpp:(.text+0x14d): r�f�rence ind�finie vers � __dn_expand �
dns.cpp:(.text+0x1dd): r�f�rence ind�finie vers � __dn_expand �
collect2: ld a retourn� 1 code d'�tat d'ex�cution
make: *** [libdkimtest] Erreur 1

Also tried with 1.0.17 but the error is it can't find getcwd.

First question : do i have to patch this version 1.0.19 ?
2nd : Have i missed something or am I doing something wrong ?

Hope you could help.
alex</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>I tried this on my (french) server with libdkim 1.0.19 and i also have a error after<br />
make LINUX=y</p>
<p>g++ -c -c dkim.cpp<br />
g++ -c -c dns.cpp<br />
g++ -c -c dkimbase.cpp<br />
g++ -c -c dkimsign.cpp<br />
g++ -c -c dkimverify.cpp<br />
dkimverify.cpp: In function `unsigned int DecodeBase64(char*)&#8217;:<br />
dkimverify.cpp:221: attention : converting de valeur n�gative � -0&#215;000000001 � vers � unsigned char �<br />
(this lign is repeated about 30 times and&#8230;)<br />
dkimverify.cpp: In function `bool ParseUnsigned(const char*, unsigned int*)&#8217;:<br />
dkimverify.cpp:846: attention : converting de valeur n�gative � -0&#215;000000001 � vers � unsigned int �<br />
dkimverify.cpp: In member function `int CDKIMVerify::ParseDKIMSignature(const std::string&amp;, SignatureInfo&amp;)&#8217;:<br />
dkimverify.cpp:1022: attention : converting de valeur n�gative � -0&#215;000000001 � vers � unsigned int �<br />
dkimverify.cpp:1050: attention : converting de valeur n�gative � -0&#215;000000001 � vers � unsigned int �<br />
dkimverify.cpp:1060: attention : converting de valeur n�gative � -0&#215;000000001 � vers � unsigned int �<br />
rm -f libdkim.a<br />
ar cr libdkim.a dkim.o dns.o dkimbase.o dkimsign.o dkimverify.o<br />
ranlib libdkim.a<br />
g++ -c -c libdkimtest.cpp<br />
g++ -olibdkimtest  \<br />
       -L . libdkimtest.o -lcrypto  -ldkim<br />
./libdkim.a(dns.o): dans la fonction � _DNSGetTXT(char const*, char*, int)�:<br />
dns.cpp:(.text+0&#215;32): r�f�rence ind�finie vers � __res_query �<br />
dns.cpp:(.text+0&#215;14d): r�f�rence ind�finie vers � __dn_expand �<br />
dns.cpp:(.text+0&#215;1dd): r�f�rence ind�finie vers � __dn_expand �<br />
collect2: ld a retourn� 1 code d&#8217;�tat d&#8217;ex�cution<br />
make: *** [libdkimtest] Erreur 1</p>
<p>Also tried with 1.0.17 but the error is it can&#8217;t find getcwd.</p>
<p>First question : do i have to patch this version 1.0.19 ?<br />
2nd : Have i missed something or am I doing something wrong ?</p>
<p>Hope you could help.<br />
alex</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Domnick</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6444</link>
		<dc:creator>Domnick</dc:creator>
		<pubDate>Sat, 03 May 2008 06:52:57 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6444</guid>
		<description>Anyone have any idea how to get around this ?

make[2]: Entering directory `/home/deger/openssl-0.9.8e/apps'
( :; LIBDEPS="${LIBDEPS:--L.. -lssl  -L.. -lcrypto }"; LDCMD="${LDCMD:-cc}"; LDFLAGS="${LDFLAGS:--O}"; LIBPATH=`for x in $LIBDEPS; do if echo $x &#124; grep '^ *-L' &#62; /dev/null 2&#62;&#38;1; then echo $x &#124; sed -e 's/^ *-L//'; fi; done &#124; uniq`; LIBPATH=`echo $LIBPATH &#124; sed -e 's/ /:/g'`; LD_LIBRARY_PATH=$LIBPATH:$LD_LIBRARY_PATH ${LDCMD} ${LDFLAGS} -o ${APPNAME:=openssl} openssl.o verify.o asn1pars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o crl2p7.o crl.o rsa.o rsautl.o dsa.o dsaparam.o ec.o ecparam.o x509.o genrsa.o gendsa.o s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o app_rand.o version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o spkac.o smime.o rand.o engine.o ocsp.o prime.o ${LIBDEPS} )
../libcrypto.a(sha256.o): In function `sha256_block_data_order':
sha256.c:(.text+0xe3): undefined reference to `sha256_block'
../libcrypto.a(sha256.o): In function `sha256_block_host_order':
sha256.c:(.text+0x12e): undefined reference to `sha256_block'
collect2: ld returned 1 exit status
make[2]: *** [link_app.] Error 1
make[2]: Leaving directory `/home/deger/openssl-0.9.8e/apps'
make[1]: *** [openssl] Error 2
make[1]: Leaving directory `/home/deger/openssl-0.9.8e/apps'
make: *** [build_apps] Error 1</description>
		<content:encoded><![CDATA[<p>Anyone have any idea how to get around this ?</p>
<p>make[2]: Entering directory `/home/deger/openssl-0.9.8e/apps&#8217;<br />
( :; LIBDEPS=&#8221;${LIBDEPS:&#8211;L.. -lssl  -L.. -lcrypto }&#8221;; LDCMD=&#8221;${LDCMD:-cc}&#8221;; LDFLAGS=&#8221;${LDFLAGS:&#8211;O}&#8221;; LIBPATH=`for x in $LIBDEPS; do if echo $x | grep &#8216;^ *-L&#8217; &gt; /dev/null 2&gt;&amp;1; then echo $x | sed -e &#8217;s/^ *-L//&#8217;; fi; done | uniq`; LIBPATH=`echo $LIBPATH | sed -e &#8217;s/ /:/g&#8217;`; LD_LIBRARY_PATH=$LIBPATH:$LD_LIBRARY_PATH ${LDCMD} ${LDFLAGS} -o ${APPNAME:=openssl} openssl.o verify.o asn1pars.o req.o dgst.o dh.o dhparam.o enc.o passwd.o gendh.o errstr.o ca.o pkcs7.o crl2p7.o crl.o rsa.o rsautl.o dsa.o dsaparam.o ec.o ecparam.o x509.o genrsa.o gendsa.o s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o app_rand.o version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o spkac.o smime.o rand.o engine.o ocsp.o prime.o ${LIBDEPS} )<br />
../libcrypto.a(sha256.o): In function `sha256_block_data_order&#8217;:<br />
sha256.c:(.text+0xe3): undefined reference to `sha256_block&#8217;<br />
../libcrypto.a(sha256.o): In function `sha256_block_host_order&#8217;:<br />
sha256.c:(.text+0&#215;12e): undefined reference to `sha256_block&#8217;<br />
collect2: ld returned 1 exit status<br />
make[2]: *** [link_app.] Error 1<br />
make[2]: Leaving directory `/home/deger/openssl-0.9.8e/apps&#8217;<br />
make[1]: *** [openssl] Error 2<br />
make[1]: Leaving directory `/home/deger/openssl-0.9.8e/apps&#8217;<br />
make: *** [build_apps] Error 1</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: landlord</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6256</link>
		<dc:creator>landlord</dc:creator>
		<pubDate>Fri, 18 Apr 2008 09:05:16 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6256</guid>
		<description>I've written a small shell script to create the keys for DKIM:



Have fun!</description>
		<content:encoded><![CDATA[<p>I&#8217;ve written a small shell script to create the keys for DKIM:</p>
<p>Have fun!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6234</link>
		<dc:creator>Mihai</dc:creator>
		<pubDate>Mon, 14 Apr 2008 10:30:50 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6234</guid>
		<description>you are right, there should have been double quotes there because I used double slashes. I is corrected now</description>
		<content:encoded><![CDATA[<p>you are right, there should have been double quotes there because I used double slashes. I is corrected now</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Fletcher</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6232</link>
		<dc:creator>David Fletcher</dc:creator>
		<pubDate>Sun, 13 Apr 2008 21:42:06 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6232</guid>
		<description>OK - I can see where the confusion is coming from. This comment software is taking out slashes. In my previous post the first should have 2, and the second should have one slash. 

Try again:
 tr -d "\\15"
 tr -d '\15'</description>
		<content:encoded><![CDATA[<p>OK - I can see where the confusion is coming from. This comment software is taking out slashes. In my previous post the first should have 2, and the second should have one slash. </p>
<p>Try again:<br />
 tr -d &#8220;\\15&#8243;<br />
 tr -d &#8216;\15&#8242;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Fletcher</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6231</link>
		<dc:creator>David Fletcher</dc:creator>
		<pubDate>Sun, 13 Apr 2008 21:39:00 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6231</guid>
		<description>Hi Mihai,

Thanks for the additional patch for the recent OpenSSL. I usually try to keep just one copy of libraries on the system to make updates and maintenance simple. I've had some nightmare cases in the past where I couldn't tell what was linked to which copy, and wanted to avoid that.

For the 'tr' part, I found the formats below work. Double slash is needed with double quotes, otherwise single slash with single quotes:

 tr -d "\15"
 tr -d '15'

David.</description>
		<content:encoded><![CDATA[<p>Hi Mihai,</p>
<p>Thanks for the additional patch for the recent OpenSSL. I usually try to keep just one copy of libraries on the system to make updates and maintenance simple. I&#8217;ve had some nightmare cases in the past where I couldn&#8217;t tell what was linked to which copy, and wanted to avoid that.</p>
<p>For the &#8216;tr&#8217; part, I found the formats below work. Double slash is needed with double quotes, otherwise single slash with single quotes:</p>
<p> tr -d &#8220;\15&#8243;<br />
 tr -d &#8216;15&#8242;</p>
<p>David.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mihai</title>
		<link>http://patchlog.com/security/qmail-and-dkim/#comment-6229</link>
		<dc:creator>Mihai</dc:creator>
		<pubDate>Sun, 13 Apr 2008 08:32:10 +0000</pubDate>
		<guid isPermaLink="false">http://patchlog.com/security/qmail-and-dkim/#comment-6229</guid>
		<description>the script should be (/bin/cat “$tmp2″ &#124;tr -d ‘\\015′) &#124; “$DKREMOTE” “$@”

note the double slashes there 

with just one slash will delete every 1 and 5 in the message . but with double slashes it will strip CR chars ( ASCII dec 13, oct 015 ) . this is required by qmail to work correctly.</description>
		<content:encoded><![CDATA[<p>the script should be (/bin/cat “$tmp2″ |tr -d ‘\\015′) | “$DKREMOTE” “$@”</p>
<p>note the double slashes there </p>
<p>with just one slash will delete every 1 and 5 in the message . but with double slashes it will strip CR chars ( ASCII dec 13, oct 015 ) . this is required by qmail to work correctly.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
