dkim issues on gnome mail lists

["Dr. Michael J. Chudobiak" <mjc avtechpulse com>]

Hi all,

The gnome mailman server doesn't seem to handle dkim-signed email 
elegantly. From my mail logs:


Nov  2 05:49:10 server2 amavis[8746]: (08746-17) dkim: FAILED Author 
signature by i=juanjomarin96 yahoo es, From: <juanjomarin96 yahoo es>, 
a=rsa-sha1, c=nofws, s=s1024, d=yahoo.es, 
m.list(ml:marketing-list.gnome.org), fail (message has been altered)

Nov  2 09:21:20 server2 amavis[2853]: (02853-13) dkim: FAILED Author 
signature by i=@gmail.com, From: <paolobenve gmail com>, a=rsa-sha256, 
c=relaxed/relaxed, s=gamma, d=gmail.com, 
m.list(ml:gthumb-list.gnome.org), fail (message has been altered)

freedesktop has the same problem:

Nov  2 08:40:11 server2 amavis[27309]: (27309-07) dkim: FAILED Author 
signature by i=@googlemail.com, From: <leoc git googlemail com>, 
a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=googlemail.com, 
m.list(ml:xorg.lists.freedesktop.org), fail (body has been altered)


I think current best practice is for mailman to strip the original 
DKIM-Signature header, using mailman's "REMOVE_DKIM_HEADERS = Yes", 
and/or have gnome's email servers re-sign the message. Some discussion 
here: http://www.mail-archive.com/mailman-users python org/msg59877.html.

- Mike