Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 6a1705926f | |||
| e6f8db9f94 | |||
| e63867d517 | |||
| 209ad11661 | |||
| 795a914845 | |||
| be92e5c5b1 | |||
| 6910ff1f9a |
@@ -1,3 +1,9 @@
|
||||
1.1.2 2019-09-23
|
||||
- Fix variable initialization so mailformed mails missing body From do not
|
||||
cause a traceback (LP: #1844161)
|
||||
- Catch more ascii encoding errors to improve resilience against bad data
|
||||
(LP: #1844189)
|
||||
|
||||
1.1.1 2019-09-06
|
||||
- Fix startup logging so it provides information at a useful time
|
||||
- Fix verify processing so missing (optional) i= tag doesn't cause the milter
|
||||
|
||||
@@ -55,6 +55,7 @@ class dkimMilter(Milter.Base):
|
||||
self.privatersa = privateRSA
|
||||
self.privateed25519 = privateEd25519
|
||||
self.fp = None
|
||||
self.fdomain = ''
|
||||
|
||||
@Milter.noreply
|
||||
def connect(self, hostname, unused, hostaddr):
|
||||
@@ -136,14 +137,18 @@ class dkimMilter(Milter.Base):
|
||||
try:
|
||||
self.fdomain = self.author.split('@')[1].lower()
|
||||
except IndexError as er:
|
||||
self.fdomain = '' # self.author was not a proper email address
|
||||
pass # self.author was not a proper email address
|
||||
if (milterconfig.get('Syslog') and
|
||||
milterconfig.get('debugLevel') >= 1):
|
||||
syslog.syslog("{0}: {1}".format(name, val))
|
||||
elif lname == 'authentication-results':
|
||||
self.arheaders.append(val)
|
||||
if self.fp:
|
||||
try:
|
||||
self.fp.write(b"%s: %s\n" % (codecs.encode(name, 'ascii'), codecs.encode(val, 'ascii')))
|
||||
except:
|
||||
# Don't choke on header fields with non-ascii garbage in them.
|
||||
pass
|
||||
return Milter.CONTINUE
|
||||
|
||||
@Milter.noreply
|
||||
@@ -260,6 +265,7 @@ class dkimMilter(Milter.Base):
|
||||
|
||||
def check_dkim(self, txt):
|
||||
res = False
|
||||
self.header_a = None
|
||||
for y in range(self.has_dkim): # Verify _ALL_ the signatures
|
||||
d = dkim.DKIM(txt)
|
||||
try:
|
||||
@@ -293,8 +299,16 @@ class dkimMilter(Milter.Base):
|
||||
self.header_i = codecs.decode(d.signature_fields.get(b'i'), 'ascii')
|
||||
except TypeError as x:
|
||||
self.header_i = None
|
||||
try:
|
||||
self.header_d = codecs.decode(d.signature_fields.get(b'd'), 'ascii')
|
||||
self.header_a = codecs.decode(d.signature_fields.get(b'a'), 'ascii')
|
||||
except Exception as x:
|
||||
self.dkim_comment = str(x)
|
||||
if milterconfig.get('Syslog'):
|
||||
syslog.syslog("check_dkim: {0}".format(x))
|
||||
self.header_d = None
|
||||
if not self.header_a:
|
||||
self.header_a = 'rsa-sha256'
|
||||
if res:
|
||||
if (milterconfig.get('Syslog') and
|
||||
(milterconfig.get('SyslogSuccess') or
|
||||
@@ -314,12 +328,18 @@ class dkimMilter(Milter.Base):
|
||||
syslog.syslog('DKIM: Fail (saved as {0})'
|
||||
.format(fname))
|
||||
else:
|
||||
syslog.syslog('DKIM: Fail ({0})'.format(d.domain.lower()))
|
||||
if milterconfig.get('Syslog'):
|
||||
if d.domain:
|
||||
syslog.syslog('DKIM: Fail ({0})'
|
||||
.format(d.domain.lower()))
|
||||
else:
|
||||
syslog.syslog('DKIM: Fail, unextractable domain')
|
||||
if res:
|
||||
result = 'pass'
|
||||
else:
|
||||
result = 'fail'
|
||||
res = False
|
||||
if self.header_d:
|
||||
self.arresults.append(
|
||||
authres.DKIMAuthenticationResult(result=result,
|
||||
header_i=self.header_i,
|
||||
@@ -328,6 +348,7 @@ class dkimMilter(Milter.Base):
|
||||
result_comment=
|
||||
self.dkim_comment)
|
||||
)
|
||||
self.header_a = None
|
||||
return
|
||||
|
||||
# get parent domain to be signed for if fdomain is a subdomain
|
||||
|
||||
Reference in New Issue
Block a user