{"action":"created","issue":{"url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/66","repository_url":"https://api.github.com/repos/trusteddomainproject/OpenARC","labels_url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/66/labels{/name}","comments_url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/66/comments","events_url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/66/events","html_url":"https://github.com/trusteddomainproject/OpenARC/issues/66","id":264632743,"node_id":"MDU6SXNzdWUyNjQ2MzI3NDM=","number":66,"title":"Google fails to verify ARC","user":{"login":"gizahNL","id":8005186,"node_id":"MDQ6VXNlcjgwMDUxODY=","avatar_url":"https://avatars3.githubusercontent.com/u/8005186?v=4","gravatar_id":"","url":"https://api.github.com/users/gizahNL","html_url":"https://github.com/gizahNL","followers_url":"https://api.github.com/users/gizahNL/followers","following_url":"https://api.github.com/users/gizahNL/following{/other_user}","gists_url":"https://api.github.com/users/gizahNL/gists{/gist_id}","starred_url":"https://api.github.com/users/gizahNL/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gizahNL/subscriptions","organizations_url":"https://api.github.com/users/gizahNL/orgs","repos_url":"https://api.github.com/users/gizahNL/repos","events_url":"https://api.github.com/users/gizahNL/events{/privacy}","received_events_url":"https://api.github.com/users/gizahNL/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2017-10-11T15:28:56Z","updated_at":"2018-09-21T16:00:22Z","closed_at":null,"author_association":"NONE","body":"Wanted to write on mailing lists, unfortunately they are non-existent? (as per: http://www.trusteddomain.org/mailman/listinfo/ )\r\n\r\nUsing same key to sign as used to sign dkim headers google fails signature verification. \r\n\r\nBuild on FreeBSD 10.3:\r\n```\r\nopenarc -V                                                                               <[759][17:11]]\r\nopenarc: OpenARC Filter v0.1.0\r\n\tCompiled with OpenSSL 1.0.1s-freebsd  1 Mar 2016\r\n\tSMFI_VERSION 0x1000001\r\n\tlibmilter version 1.0.1\r\n\tlibopenarc 0.1.0:\r\n\r\n```\r\nUsing postfix, milters after Amavisd. \r\n\r\nOpenARC config used:\r\n```\r\ncat /usr/local/etc/openarc/openarc.conf                                                  <[760][17:20]]\r\n AuthservID\t\theteigenwijsje.nl\r\nDomain\t\t\theteigenwijsje.nl\r\nKeyFile\t\t\t/var/lib/dkim/heteigenwijsje.nl.pem\r\n Mode\t\t\tsv\r\n PidFile\t\t/var/run/openarc.pid\r\nSelector\t\tdkim\r\n SignatureAlgorithm\trsa-sha256\r\nSocket\t\t\tinet:8899@localhost\r\n SoftwareHeader\tyes\r\nSyslog\t\t\tYes\r\n UserID\t\tvscan:vscan\r\n```\r\nE-mail headers (replace <PRIVATE> with zzzomeone in case of gmail and gijsje in heteigenwijsje case):\r\n```\r\nDelivered-To: <PRIVATE>@gmail.com\r\nReceived: by 10.28.28.136 with SMTP id c130csp768192wmc;\r\n        Wed, 11 Oct 2017 08:02:42 -0700 (PDT)\r\nX-Google-Smtp-Source: AOwi7QBd5q+jBZiZUwQwL4vDRWwgAw3BQf1REX91IrEIEJZ7s0HrgXCjc+x9C6l/Iy1HbH+VDpRt\r\nX-Received: by 10.80.139.164 with SMTP id m33mr4924985edm.289.1507734162668;\r\n        Wed, 11 Oct 2017 08:02:42 -0700 (PDT)\r\nReturn-Path: <<PRIVATE>@heteigenwijsje.nl>\r\nReceived: from smtp.heteigenwijsje.nl (smtp.heteigenwijsje.nl. [80.127.116.100])\r\n        by mx.google.com with ESMTPS id 1si517428edw.461.2017.10.11.08.02.42\r\n        for <<PRIVATE>@gmail.com>\r\n        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\r\n        Wed, 11 Oct 2017 08:02:42 -0700 (PDT)\r\nReceived-SPF: pass (google.com: domain of <PRIVATE>@heteigenwijsje.nl designates 80.127.116.100 as permitted sender) client-ip=80.127.116.100;\r\nAuthentication-Results: mx.google.com;\r\n       dkim=pass header.i=@heteigenwijsje.nl header.s=dkim header.b=o/sOgCmP;\r\n       arc=fail (signature failed);\r\n       spf=pass (google.com: domain of <PRIVATE>@heteigenwijsje.nl designates 80.127.116.100 as permitted sender) smtp.mailfrom=<PRIVATE>@heteigenwijsje.nl;\r\n       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=heteigenwijsje.nl\r\nReceived: from mailserv.heteigenwijsje.nl (localhost [127.0.0.1]) by smtp.heteigenwijsje.nl (Postfix) with ESMTP id 63DAA34794 for <<PRIVATE>@gmail.com>; Wed, 11 Oct 2017 17:02:40 +0200 (CEST)\r\nARC-Filter: OpenARC Filter v0.1.0 smtp.heteigenwijsje.nl 63DAA34794\r\nAuthentication-Results: heteigenwijsje.nl; arc=none header.d=heteigenwijsje.nl\r\nARC-Seal: i=1; a=rsa-sha256; d=heteigenwijsje.nl; s=dkim; t=1507734160; cv=none; b=dY5tKxOhqF/8KUsb3Bo7REygUiejdMtF+iC24oBjojTN2A6VHKyWw/o2jto9jhKnjimSmpYdNhdc2rGP7S+F1InghCkPGufk2iiZ/rrv/iKNgNc0LlJRQdudn0P+B/ZWat2HnGHn8CMqvIpbKpidcXYOmj51IPYwQSE5tmwCNmM=\r\nARC-Message-Signature: i=1; a=rsa-sha256; d=heteigenwijsje.nl; s=dkim; t=1507734160; c=relaxed/simple; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; h=DKIM-Signature:X-Virus-Scanned:Received:Received:To:From:Subject:\r\n\t Message-ID:Date:User-Agent:MIME-Version:Content-Type:\r\n\t Content-Transfer-Encoding:Content-Language; b=TRFkzksm2fVytyzdFNm4Up78OtNBDPf0sgNWo1pgkZECKwH+tsAXuj730I4ghUVEAv7WkTpV7BQBI3PoQqLwiX9ljUJOHDMcYFR+AQAxxE4+MHPVHV/xzyqWwzXxIH2TafWEYqVN9Wbcq3lk/Bmru+JG1SAhqefhh4w1U5OHeiM=\r\nARC-Authentication-Results: i=1; heteigenwijsje.nl; none\r\nDKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=heteigenwijsje.nl; s=dkim; t=1507734160; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; h=To:From:Subject:Date; b=o/sOgCmPW6NaUTLVY7GV1AD6+hT4PNzeSWU6piwJJBEcD242lA0VAHBkvPwoa0kMK\r\n\t N8DIWqhmiO9X7wWdespboQi8nzRFVZ6mYybDecWeR/SIg0cls7bZYzjYl8yAKOXxso\r\n\t WnoKzyGThXM+tiexss4HEkHTSXtl4Yo9OuDRYsHY=\r\nX-Virus-Scanned: amavisd-new at mailserv.heteigenwijsje.nl\r\nReceived: from smtp.heteigenwijsje.nl ([127.0.0.1]) by mailserv.heteigenwijsje.nl (mailserv.heteigenwijsje.nl [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id N7iioL2bFyX7 for <<PRIVATE>@gmail.com>; Wed, 11 Oct 2017 17:02:30 +0200 (CEST)\r\nReceived: from [IPv6:2001:984:a1fc:1:bc4f:29a2:28ba:ef40] (unknown [IPv6:2001:984:a1fc:1:bc4f:29a2:28ba:ef40]) by smtp.heteigenwijsje.nl (Postfix) with ESMTPSA id 742DB34789 for <<PRIVATE>@gmail.com>; Wed, 11 Oct 2017 17:02:30 +0200 (CEST)\r\nTo: <PRIVATE>@gmail.com\r\nFrom: Gijs Peskens <<PRIVATE>@heteigenwijsje.nl>\r\nSubject: test123\r\nMessage-ID: <fbe3955d-5fe5-e2bd-f9e6-bfdd2e28b2f1@heteigenwijsje.nl>\r\nDate: Wed, 11 Oct 2017 17:02:30 +0200\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0\r\nMIME-Version: 1.0\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Transfer-Encoding: 7bit\r\nContent-Language: en-US\r\n\r\ntest\r\n\r\n```\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/comments/423585489","html_url":"https://github.com/trusteddomainproject/OpenARC/issues/66#issuecomment-423585489","issue_url":"https://api.github.com/repos/trusteddomainproject/OpenARC/issues/66","id":423585489,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMzU4NTQ4OQ==","user":{"login":"mskucherawy","id":1780247,"node_id":"MDQ6VXNlcjE3ODAyNDc=","avatar_url":"https://avatars1.githubusercontent.com/u/1780247?v=4","gravatar_id":"","url":"https://api.github.com/users/mskucherawy","html_url":"https://github.com/mskucherawy","followers_url":"https://api.github.com/users/mskucherawy/followers","following_url":"https://api.github.com/users/mskucherawy/following{/other_user}","gists_url":"https://api.github.com/users/mskucherawy/gists{/gist_id}","starred_url":"https://api.github.com/users/mskucherawy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mskucherawy/subscriptions","organizations_url":"https://api.github.com/users/mskucherawy/orgs","repos_url":"https://api.github.com/users/mskucherawy/repos","events_url":"https://api.github.com/users/mskucherawy/events{/privacy}","received_events_url":"https://api.github.com/users/mskucherawy/received_events","type":"User","site_admin":false},"created_at":"2018-09-21T16:00:22Z","updated_at":"2018-09-21T16:00:22Z","author_association":"COLLABORATOR","body":"Just to be clear: The code that does selection of header fields to sign should follow the RFC, but currently doesn't.  I'll fix that.  But apart from that, it shouldn't matter what header fields are getting signed, because they all get handled the same way."}}
{"actor":{"display_login":"mskucherawy"}}