2275718e74
Fix dkimverify verbose option so it works and add documentation, thanks to Uwe Kleine-König for the patch (Debian: #1075791), bump version to 1.1.9
Scott Kitterman2024-07-05 09:42:26 -04:00
21b9410f4f
Correctly handle verification of signatures without t= (timestamp) and with x= (expiration); both are optional (LP: 2071892)
Scott Kitterman2024-07-04 18:09:50 -04:00
1ffa2cb090
Correct signature in ARC-Seal on LF as linesep (LP: #2052720) - Thanks to Nikolay Vizovitin for the report and the fix
Scott Kitterman2024-06-23 17:26:31 -04:00
71f5d118e6
- Correct line separtor after AAR header field (LP: #2049018) - Thanks to Nikolay Vizovitin for the report and the fix
Scott Kitterman2024-06-23 17:16:44 -04:00
9380655a6e
Correct ARC signing for AR headers with authres-version or comments before resinfo (LP: #2052526) - Thanks to Nikolay Vizovitin for the report and the fix
Scott Kitterman2024-06-23 17:06:31 -04:00
ed5931c0c9
Fix error in validate_signature_fields which prevented signature expiration from being properly evaluated (LP: #2068937)
Scott Kitterman2024-06-23 16:34:37 -04:00
8cf323d4ea
Confine errors from dnspython to dnsplug and use dkim errors, since dkim.__init__.py doesn't import dns and needs dkim errors (LP: #2018646)
Scott Kitterman2023-05-12 01:13:46 -04:00
dd650da4f0
Properly cleanup temporary directories in tests
Scott Kitterman2023-04-30 09:47:26 -04:00
7262f53687
Update documentation in README.md on handling private keys
Scott Kitterman2023-04-30 09:31:09 -04:00
810d543085
Create ed25519 key files with secure permissions to avoid risk of insecure chmode call/race condition (LP: #2017430)
Scott Kitterman2023-04-30 09:25:28 -04:00
2fc00b0218
Catch nacl.exceptions.ValueError and raise KeyFormatError, similar to how RSA key errors are treated (LP: #2018021)
Scott Kitterman2023-04-29 00:09:14 -04:00
dd6bbd4c88
- Fix traceback when attempting to verify an unsigned message using async verify (Thanks to Nikita Sychev for the report and a suggested fix) (LP: #2008723)
Scott Kitterman2023-02-28 00:02:07 -05:00
bf5ab32d55
Bump version to 1.1.1 and document python2 is no longer supported (LP: #2008738)
Scott Kitterman2023-02-27 23:49:56 -05:00
59e9dd2cb5
Correct base64 validation regexp so that valid signature with == split between two lines are not incorrectly evaluated as invalid (LP: #2002295) - Thanks to <https://launchpad.net/~obadz> for the report and the proposed fix
Scott Kitterman2023-02-25 17:16:53 -05:00
2115a5e9f8
Invalid Authentication-Results header fields are ignored for ARC signing (LP: #1884044)
Scott Kitterman2023-02-25 17:10:17 -05:00
b74452d9da
Add new dkim.DnsTimeoutError class to report queried domain and selector along with timeout error from dnspython (LP: #1873449)
Scott Kitterman2023-02-25 16:44:06 -05:00
233a9699ed
Add USE_ASYNC flag to allow async to be disabled when aiodns is installed (LP: #1954331) - see README.md for details
Scott Kitterman2023-02-25 16:25:20 -05:00
50a81ab8d6
Add test test_non_utf8 which at least demonstrates not crashing on non UTF-8 data
Scott Kitterman2023-02-25 15:40:49 -05:00
143e3bffea
Fix dknewkey import in dkim/tests/test_dkim_generate.py
Scott Kitterman2023-02-25 15:39:38 -05:00
5195dbaf3d
Add limitations section to README to document current IDN status
Scott Kitterman2023-02-25 15:38:47 -05:00
0540d3cb17
Changed read_test_data to suit test needs
Spitap2022-08-01 17:05:41 +02:00
fab181ae34
Add key generation unit test
Spitap2022-08-01 09:41:59 +02:00
d1360c8e25
Add tests for invalid domains, probably not a security issue in the DKIM context, but we should raise errors here.
Scott Kitterman2020-04-21 20:29:45 -04:00
7848effe4d
Update dkimverify (1) to document --index option
Scott Kitterman2020-04-06 18:16:24 -04:00
3e16ceac23
Add option to specify index number of signature to verify to dkimverify (Thanks to Nick Baugh for the change)
Scott Kitterman2020-04-06 18:09:23 -04:00
987ea0a964
Add test case for verifying a message with no signature
Scott Kitterman2020-04-06 17:43:16 -04:00
095f68d943
- Correct dkim.verify processing to avoid errors when verifying messages with no DKIM signatures
Scott Kitterman2020-04-06 00:27:04 -04:00
443aed143a
- Correct signature indexing error introduced in 1.0.0 that prevents verification of multiple signatures in a single message
Scott Kitterman2020-01-15 11:03:07 -05:00
dc2f7f07f2
- dknewkey: On posix operating systems set file permissions to 600 for ed25519 private key files (as is already done for RSA) (LP: #1857827)
Scott Kitterman2019-12-31 01:17:19 -05:00
73dbcc08a8
Bump version to 1.1 for next feature series development
Scott Kitterman2019-12-16 15:21:27 -05:00
cb32e3e527
- Set minimum dnspython version to 1.16 because previous versions can not support the timeout parameter (LP: #1856546)
Scott Kitterman2019-12-16 15:18:53 -05:00
5a0824108d
Provide specialized error message when signing or verifying ed25519 signatures and pynacl is not installed (LP: #1854475)
Scott Kitterman2019-12-15 01:12:02 -05:00
6c5f701131
Follow CNAMES when looking up key records when using DNS (pydns) (LP: #1856421)
Scott Kitterman2019-12-15 00:42:31 -05:00
b32c9175c5
Merge branch 'master' of git+ssh://git.launchpad.net/dkimpy
Scott Kitterman2019-11-08 23:19:35 -05:00
4d2f425ae3
- Support signature verification with SubjectPublicKeyInfo formatted keys since, although rare, they are RFC 6376 specified (LP: #1851862)
Scott Kitterman2019-11-08 23:12:31 -05:00
4b48a82de6
- Support signature verification with SubjectPublicKeyInfo formatted keys since, although rare, they are RFC 6376 specified (LP: #1851862)
Scott Kitterman2019-11-08 23:12:31 -05:00
5893862e31
New keys and test cases for RSA key format variants like RSAPublicKey
Scott Kitterman2019-11-08 21:21:35 -05:00
7972217756
DKIM.verify: Refactor to minimize code duplication in dkim.asyncsupport.
Scott Kitterman2019-11-05 21:36:06 -05:00
9bdb451cd8
DKIM.verify_sig: Refactor to minimize code duplication in dkim.asyncsupport.
Scott Kitterman2019-11-05 21:10:28 -05:00
3de1dc0362
Refactor load_pk_from_dns to reduce code duplication between async and non-async.
Scott Kitterman2019-11-05 08:34:13 -05:00
2973852fbb
- Add new DKIM.present function to allow applications to test if a DKIM signature is present without doing validation (LP: #1851141)
Scott Kitterman2019-11-03 11:57:30 -05:00
e8ee183a7f
Async version of dkimverify to demonstrate asyncio.
Scott Kitterman2019-11-02 11:16:13 -04:00
3dda94ca2d
Initial async support - works but so much overriding ...
Scott Kitterman2019-11-02 11:15:36 -04:00
2dc071962d
Don't error out on dnsplug tests is DNS/dns isn't installed as preparation for adding async/aiodns support
Scott Kitterman2019-11-01 17:24:16 -04:00
diskette
Diskette Guy