Just Launched: You can now import projects and releases from Google Code onto SourceForge
We are excited to release new functionality to enable a 1-click import from Google Code onto the Allura platform on SourceForge. You can import tickets, wikis, source, releases, and more with a few simple steps. Read More
From: Murray S. Kucherawy <msk@se...> - 2004-07-17 08:41:47
To help track down sign/verify failures, do the following:
(1) On the sending server, start dk-filter with the DKDEBUG environment
variable set to a string containing the letter "c". There are other debug
flags (check the READMEs), but if you aren't using any, just do:
setenv DKDEBUG c
(2) Repeat this on the receiving server.
(3) Send a message.
A temporary file will be created at each end in /var/tmp which will
contain the canonicalized form of the message. That's what will be passed
through the sign/verify functions. You can diff them to see how they
vary. The most common problem is a header that was appended or wrapped
between the signing operation and the attempt to verify.
The DKDEBUG variable is only ever checked when the application starts, so
on a busy server, /var/tmp will now be filling up with files. Stop
dk-filter, unset that variable, and start it again.