ebe8fc7c77
Add support for RFC 8460 tlsrpt DKIM signature processing (LP: #1847020 )
2019-10-31 20:53:06 -04:00
5487f798ac
Documentation updates
2019-10-30 18:52:36 -04:00
1f2597a666
- Add new timeout parameter to enable DNS lookup timeouts to be adjusted
...
- Drop usage of pymilter Milter.dns in dnsplug since it doesn't support
havine a timeout passed to it
2019-10-30 18:46:31 -04:00
6db388df39
Ignore unknown service types in key records (LP: #1847020 )
2019-10-07 08:34:05 -04:00
8365b52ac8
- Fix default canonicalization for DKIM signature verification to be
...
simple/simple per RFC 6376 (LP: #1839299 ) (Thanks to Cyril Nicodème for
the report and a suggested fix)
2019-08-09 09:21:26 -04:00
7766ffd7ab
Update copyright statements
2019-04-14 22:57:35 -04:00
a1b6e73ae1
- Add additional text documenting use of srv_id for ARC signing (LP: #1808301 )
2019-04-14 22:21:45 -04:00
aa5419b7d9
Fix cv=none processing for initial signature in chain
2019-04-14 22:17:41 -04:00
439d66e1e1
Resolve merge conflicts
2019-04-13 21:21:49 -04:00
93e647c8de
Set maxlen to 71 for subsequent lines since we already have a leading space (LP: #1823006 ), make doctest demonstrate the problem.
2019-04-13 20:53:16 -04:00
118e854889
- Clarify the crlf does not count towards line length in fold
...
(LP: #1823008 )
2019-04-13 15:05:04 -04:00
43c91feac6
Document content debugging parameter.
2018-12-31 09:17:53 -05:00
4175d75534
Merge remote-tracking branch 'upstream/master' into content_debugging
2018-12-31 09:10:24 -05:00
6bc38aaf9b
add line separator support
2018-12-23 13:26:05 +01:00
6b4127f920
Don't insert an extra space at the end of the line when doing a soft fold.
...
Trailing whitespaces are best avoided.
2018-12-12 21:30:56 -05:00
2d474d6b04
Do not take the name length into account on the second line when folding.
...
Setting namelen could have no effect, my guess is that this was the
original intention of the code.
This results in more efficient usage of lines.
2018-12-12 21:14:08 -05:00
82bef5983b
Don't log message content by default.
...
Right now, it is quite easy to end up logging the whole message in the
log when verifying signatures. This can result in wasted resources
writing the log to disk and increasing memory usage. This can also be
a private data leak if logging is put in DEBUG in a production
environment.
2018-12-12 15:30:47 -05:00
c3eb342611
Fixed ARC verification to fail is h= tag is present in Arc-Seal, added test, bumped version to start 0.9.1
2018-11-09 19:58:11 -05:00
267e62115e
- Added missing documentation for timestamp function dkim.arc_sign
...
(LP: #1800314 )
2018-10-30 11:52:43 -04:00
09d4c3d84d
Fix @since for add_should_not
2018-10-30 11:40:20 -04:00
8032276b57
Bump version to 0.9.0 since this is now a feature release
...
- Update oversigned (frozen) header field list to reduce signature
fragility (removes 'date' and 'subject' fields from being oversigned by
default - see usage section of README for information on how to restore
the previous behavior)
- Added new add_should_not for DKIM/ARC classes to prevent additional
header fields from being signed
- Added 'from' to should sign list (to prevent it from not being signed at
all in the unusual event that 'from' is locally removed from the frozen
header field set (LP: #1525048 )
- Updates for experimental ARC support:
- Specified that for ARC, Authentication-Results should not be signed
2018-10-30 11:29:09 -04:00
82d01d8a42
- Raise error when ARC signing if i= instance limit value of 50 is
...
exceeded
2018-10-30 08:55:32 -04:00
cd0ebc1ecb
- Updates for experimental ARC support:
...
- Limit to rsa-sha256, rsa-sha1 not used by ARC and multi-signature
design TBD
2018-10-30 08:13:06 -04:00
4142cd1bd0
lack of Type Hinting for sign and verify functions, lp:1782596
2018-10-27 20:56:05 -04:00
a1ca321fa5
PEP8 Blank Lines Style Issues, lp:1782596
2018-10-27 20:53:32 -04:00
f8deb49c0d
Don't error out in Python 3 if include headers is string (LP: #1776775 )
2018-06-16 18:18:45 -04:00
0338aedcc6
Fix bare except statements for expected ImportErrors
2018-06-16 17:28:02 -04:00
0566b9b4c1
- Correctly fold lines at or near the maximum line length (fix folding
...
zero length lines and adding a blank line and adding an exra cr/lf for
lines near max length (LP: #1717576 )
2018-06-16 16:59:39 -04:00
a0ae8c24c5
Detect unknown algorithm in k= tag and raise an appropriate error, vice
...
failing with a traceback
2018-05-18 19:42:46 -04:00
92608e79c4
Simplify error message for bad version (match what Google does)
2018-05-18 18:21:32 -04:00
bec6869c78
Detect incorrect version in DKIM public key record (LP: #1763815 )
2018-05-18 18:17:30 -04:00
43e56378c1
- Return an empty list (as expected) when no AR headers are found or no AR
...
arc stamps are found and the chain terminated (LP: #1748146 )
2018-02-11 19:39:51 -05:00
3209be62d1
Fix a= tag in ed25519 signatures (thanks to Jeremy Harris)
2018-02-05 11:28:05 -05:00
3138f90077
Updated copyright statements
2018-02-05 04:05:41 -05:00
077bf4813c
Self consistent, but not externally verified ed25519 based on draft-ietf-dcrup-dkim-crypto-08
2018-02-05 03:53:03 -05:00
10e12c60d8
- Fix unbound local variable error when processing signatures with an x
...
tag, but no t tag (LP: #1739637 )
2017-12-21 16:35:42 -05:00
44146ed2de
Fix arcverify tag requirements (LP: #1710312 )
2017-11-18 23:34:50 -05:00
04b1a8dddf
Reapply lost ARC updates
2017-11-18 20:38:47 -05:00
01a2f77481
Revert a bunch of rsafp stuff now that DCRUP isn't going to do rsafp
2017-11-18 20:17:35 -05:00
3f9660716e
Delete unused sys import
2017-07-28 01:32:25 -04:00
c37fcf55e8
Merge Gene Shuman updates for ARC
2017-07-28 01:30:52 -04:00
17d7c39155
Minor cleanup for ARC
2017-07-27 13:12:57 -07:00
45dbdeabcf
Updates for changes in handling of ARC failures. Added support for merging AR headers for AAR creation
2017-07-26 13:09:32 -07:00
c7782addd5
- Add generation of rsafp DKIM signatures per
...
draft-ietf-dcrup-dkim-crypto-02
2017-06-23 18:29:37 -04:00
38664fab55
Check and update references to RFC 4871 to refer to RFC 6376.
2017-05-31 02:01:22 -04:00
e14a4f3539
- Fixed problem with header folding that caused the first line to be
...
folded too long (Updated test test_add_body_length since l= tag is no
longer at the beginning of a line
2017-05-30 12:11:15 -04:00
4079b79abc
Fix byte casting issues & typos
2017-03-01 16:48:32 -08:00
7456fffcea
python3.4 cant interpolate tuples into byte strings
2017-02-27 16:16:20 -08:00
1ded8e9171
Pre-release version bumps and documentation updates.
2017-01-23 12:18:26 -05:00
ac6d9a6bb3
refactoring/integrating ARC code
2017-01-17 13:20:20 -08:00
Scott Kitterman