fix: opendkim/final.lua: Delete up to 10 Authentication-Results headers

There can be more than one header

cmdeploy/src/cmdeploy/opendkim/final.lua

@@ -31,17 +31,13 @@ end
 if valid then
 	-- Strip all DKIM-Signature headers after successful validation
 	-- Delete in reverse order to avoid index shifting.
-	for i = nsigs, 1, -1 do
+	for i = nsigs - 1, 0, -1 do
 		odkim.del_header(ctx, "DKIM-Signature", i)
 	end
 
-	-- Delete first and presumably only occurence
+	-- Delete up to 10 Authentication-Results headers
-        odkim.del_header(ctx, "Authentication-Results", 0)  
+	for i = 9, 0, -1 do
-else
+		odkim.del_header(ctx, "Authentication-Results", 0)
-	odkim.set_reply(ctx, "554", "5.7.1", "No valid DKIM signature found")
-	-- Delete in reverse order to avoid index shifting.
-	for i = nsigs, 1, -1 do
-		odkim.del_header(ctx, "DKIM-Signature", i)
 	end
 else
 	odkim.set_reply(ctx, "554", "5.7.1", error_msg)

doc/source/overview.rst

@@ -272,8 +272,8 @@ by OpenDKIM screen policy script before validating the signatures. This
 corresponds to strict :rfc:`DMARC <7489>` alignment (``adkim=s``).
 If there is no valid DKIM signature on the incoming email, the
 sender receives a “5.7.1 No valid DKIM signature found” error.
-After validating the DKIM signature, 
+After validating the DKIM signature,
-the `final.lua` script strips all ``OpenDKIM:`` headers to reduce message size on disc. 
+the `final.lua` script strips all ``OpenDKIM:`` headers to reduce message size on disc.
 
 Note that chatmail relays