Operations grimoire/Mail/DKIM: Difference between revisions
From Nasqueron Agora
< Operations grimoire | Mail
(→Add a domain: Let's try 2048 keys) |
No edit summary |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
Mails are signed with OpenDKIM, an open-source implementation for DKIM. | |||
== Add a domain == | == Add a domain == | ||
To create a key with <code>unium</code> as DKIM selector for <domain.tld>: | To create a key with <code>unium</code> as DKIM selector for <domain.tld>: | ||
<source lang="console"> | <source lang="console"> | ||
$ | $ add-dkim-domain domain.tld | ||
</source> | |||
$ | |||
To create a key with another selector: | |||
<source lang="console"> | |||
$ add-dkim-domain domain.tld <selector> | |||
</source> | </source> | ||
| Line 19: | Line 23: | ||
== Troubleshooting == | == Troubleshooting == | ||
=== Can't load key from … Permission denied === | === Can't load key from … Permission denied === | ||
Keys must | Keys must be readeable to opendkim user. | ||
<source lang="console"> | <source lang="console"> | ||
$ chown opendkim /etc/opendkim/keys/*/*.private | $ chown opendkim /usr/local/etc/opendkim/keys/*/*.private | ||
</source> | </source> | ||
DKIM must succeed: as long as this isn't fixed, Postfix won't send mail for this domain. | DKIM must succeed: as long as this isn't fixed, Postfix won't send mail for this domain. | ||
[[Category:Mail]] | |||
Latest revision as of 21:33, 24 October 2024
Mails are signed with OpenDKIM, an open-source implementation for DKIM.
Add a domain
To create a key with unium as DKIM selector for <domain.tld>:
$ add-dkim-domain domain.tld
To create a key with another selector:
$ add-dkim-domain domain.tld <selector>
Test
Send a mail from to another mail server.
You should see a DKIM pass.
You can also from a mailbox for this domain send a mail to check-auth
verifier.port25.com
Troubleshooting
Can't load key from … Permission denied
Keys must be readeable to opendkim user.
$ chown opendkim /usr/local/etc/opendkim/keys/*/*.private
DKIM must succeed: as long as this isn't fixed, Postfix won't send mail for this domain.
