[Rspamd-Users] Can not get ARC signing working

[Christian Rößner]

Problem solved.

It was some user settings that had a groups_disabled arc.

-Christian

> Am 14.06.2019 um 11:37 schrieb Christian Rößner via Users <users at lists.rspamd.com>:
> 
> Hi,
> 
> I try hard to get ARC signing working in current master branch. I have one key for all domains. I tested with an address from @roessner.email and sent to a icloud.com address. Also tested the other direction as well. No luck.
> 
> 
> /etc/rspamd/local.d:
> -----------------------------------------------------------
> allow_hdrfrom_mismatch = true;
> allow_username_mismatch = true;
> check_pubkey = true;
> 
> path = "${DBDIR}/arc/default/BD87C431-DD13-4C61-99A3-446B863A64D6.key";
> selector = "BD87C431-DD13-4C61-99A3-446B863A64D6";
> -----------------------------------------------------------
> 
> 
> ls -l /var/lib/rspamd/arc/default:
> -----------------------------------------------------------
> -rw-r----- 1 root rspamd 1704 Jun 14 10:26 BD87C431-DD13-4C61-99A3-446B863A64D6.key
> -rw-r--r-- 1 root root    413 Jun 14 10:27 BD87C431-DD13-4C61-99A3-446B863A64D6.pub
> -----------------------------------------------------------
> 
> 
> host -t txt BD87C431-DD13-4C61-99A3-446B863A64D6._domainkey.roessner.email:
> -----------------------------------------------------------
> BD87C431-DD13-4C61-99A3-446B863A64D6._domainkey.roessner.email descriptive text "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTZXSaIB1DpKUq+SaV9LyCfD1YQhj5LnHjKmIEU/6AEaXLTAWp+P4uSf/xMsP2Rzf6nDzaT89nzxB1XdFNVn7UeIYw5/QWbuHaoldfdGg/MGBKsrgwDkHgUsWFazjuAq1zOaau4ksppiHPD+Ye/pMugUcWkjkIOU8yhjPbO9h0NDtqw5fwswbkm6flEqwHdze" "MdUMphr3THo3GnKT8PgGW6ZqqvaDzid4cb7uEj2dhS7xNjbvrS6FqHMS2GDWHzDJ3nSh3FQ9j7XMKNzn4iv9adiexNTVVpBD5W5Cl5IHMMiaY3bcKCutbvyFQZXFMRcAyf2rYhYMq+MIBXuci4e7QIDAQAB"
> -----------------------------------------------------------
> 
> 
> I do not see ARC_SIGN in the list of symbols and the header is not created. I also have turned on debug for arc, but it does not create lines in sending (outbound) direction. In inbound direction it tells me that it ignores signing, because the user would be unauthenticated. Even if I set "auth_only" to false does not change this.
> 
> I am stuck. Does someone know how to set this up correctly?
> 
> Kind regards
> 
> Christian
> -- 
> Rößner-Network-Solutions
> Karl-Bröger-Str. 10, 36304 Alsfeld
> Fax: +49 6631 78823409, Mobil: +49 171 9905345
> USt-IdNr.: DE225643613, https://roessner.website
> PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5 
> 
> -- 
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users

-- 
Rößner-Network-Solutions
Karl-Bröger-Str. 10, 36304 Alsfeld
Fax: +49 6631 78823409, Mobil: +49 171 9905345
USt-IdNr.: DE225643613, https://roessner.website
PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5