DKIM How To

From HyperSecurity Wiki
Jump to: navigation, search

DKIM add new key:

  • create keys and put them into /etc/opendkim/keys/domains.com/keys
  • add domain to trusted.hosts
  • add domain to signing.table
  • add domain to key.table
systemctl restart opendkim

Generate keys two ways:

opendkim-genkey -t -s mail -d domain.com -v
opendkim-genkey -b 2048 -h rsa-sha256 -r -s mail -d domain.com -v

Add mail.txt to DNS:

cat mail.txt >> /etc/bind/zone-enabled/domain.com.zone

Test Keys:

opendkim-testkey -d domain.com -s mail -vvv

Need permissions:

chown -R opendkim:opendkim /etc/opendkim/
chmod go-rwx /etc/opendkim/*
chmod 700 -R /etc/opendkim/keys/

Debugging:

grep -r milter /var/log/syslog
grep -i dkim /var/log/mail.log

Notes:

If it keys do not pass on reboot, do the following:

systemctl restart opendkim
systemctl restart postfix

Documentation:

Tools: