1f2597a666
- Add new timeout parameter to enable DNS lookup timeouts to be adjusted - Drop usage of pymilter Milter.dns in dnsplug since it doesn't support havine a timeout passed to it
Scott Kitterman2019-10-30 18:46:31 -04:00
8365b52ac8
- Fix default canonicalization for DKIM signature verification to be simple/simple per RFC 6376 (LP: #1839299) (Thanks to Cyril Nicodème for the report and a suggested fix)
Scott Kitterman2019-08-09 09:21:26 -04:00
0019bad372
- Fix linesep setting in arcsign script (LP: #1838262) (Thanks to Gowtham Gopalakrishnan for the report and the patch)
Scott Kitterman2019-08-04 17:51:27 -04:00
fd3f501787
Update dkim/tests/test_arc.py for changes in dkim.fold
Scott Kitterman2019-04-13 20:54:13 -04:00
93e647c8de
Set maxlen to 71 for subsequent lines since we already have a leading space (LP: #1823006), make doctest demonstrate the problem.
Scott Kitterman2019-04-13 20:53:16 -04:00
7dee16a5b1
Refactor canonicalization.py strip_trailing_lines to avoid using re for more consistent processing across python versions
Jonathan Bastien-Filiatrault2018-12-11 14:34:34 -05:00
72f58200e3
- Refactored dknewkey so that it correctly writes out text instead of bytes
Scott Kitterman2018-12-08 17:32:56 -05:00
c3eb342611
Fixed ARC verification to fail is h= tag is present in Arc-Seal, added test, bumped version to start 0.9.1
Scott Kitterman2018-11-09 19:58:11 -05:00
8032276b57
Bump version to 0.9.0 since this is now a feature release - Update oversigned (frozen) header field list to reduce signature fragility (removes 'date' and 'subject' fields from being oversigned by default - see usage section of README for information on how to restore the previous behavior) - Added new add_should_not for DKIM/ARC classes to prevent additional header fields from being signed - Added 'from' to should sign list (to prevent it from not being signed at all in the unusual event that 'from' is locally removed from the frozen header field set (LP: #1525048) - Updates for experimental ARC support: - Specified that for ARC, Authentication-Results should not be signed
Scott Kitterman2018-10-30 11:29:09 -04:00
82d01d8a42
- Raise error when ARC signing if i= instance limit value of 50 is exceeded
Scott Kitterman2018-10-30 08:55:32 -04:00
cd0ebc1ecb
- Updates for experimental ARC support: - Limit to rsa-sha256, rsa-sha1 not used by ARC and multi-signature design TBD
Scott Kitterman2018-10-30 08:13:06 -04:00
3c2beaf70e
- Python 3.7 compatibility fixup for dkim.canonicalization. strip_trailing_lines due to changed RE.sub() processing (LP: #1800313)
Scott Kitterman2018-10-29 19:53:12 -04:00
b81797bc70
Add Changelog entries for Thomas Ward last two changes
Scott Kitterman2018-10-29 19:48:44 -04:00
4142cd1bd0
lack of Type Hinting for sign and verify functions, lp:1782596
Thomas Ward2018-10-27 20:56:05 -04:00
0566b9b4c1
- Correctly fold lines at or near the maximum line length (fix folding zero length lines and adding a blank line and adding an exra cr/lf for lines near max length (LP: #1717576)
Scott Kitterman2018-06-16 16:59:39 -04:00
261eb5f5eb
Add test for detecting bad version number in DKIM txt record
Scott Kitterman2018-05-18 17:04:50 -04:00
3b28e86f15
Indicate that ed25519-sha256 is no longer experimental
Scott Kitterman2018-05-18 02:48:42 -04:00
85c4fe2adf
- Fix typo in dknewky(1) for k= tag (Thanks to Andreas Schulze for reporting)
Scott Kitterman2018-03-28 06:51:35 -04:00
3020b0e6d6
- Use install_requires and extras_requires to document external dependencies for dkimpy (LP: #1227526)
Scott Kitterman2018-03-27 01:23:00 -04:00
43e56378c1
- Return an empty list (as expected) when no AR headers are found or no AR arc stamps are found and the chain terminated (LP: #1748146)
Scott Kitterman2018-02-11 19:39:51 -05:00
d097a5f523
- Update ed25519 tests, including using sample keys from RFC 8032 Section 7.1 and the sample message from RFC 6376
Scott Kitterman2018-02-11 19:26:04 -05:00
077bf4813c
Self consistent, but not externally verified ed25519 based on draft-ietf-dcrup-dkim-crypto-08
Scott Kitterman2018-02-05 03:53:03 -05:00
10e12c60d8
- Fix unbound local variable error when processing signatures with an x tag, but no t tag (LP: #1739637)
Scott Kitterman2017-12-21 16:35:42 -05:00
0c6fdbf7c6
- Add new test, test_implicit_k, to verify that RSA processing is still correct when the optional k= tag is not present in the DKIM public key record
Scott Kitterman2017-11-30 14:33:01 -05:00