iRedMail — Cannot add dkim for next domains

Re: Cannot add dkim for next domains

null@example.com (ZhangHuangbin) — Mon, 17 Jul 2023 06:14:25 +0000

andrei_p wrote:

just found docs.iredmail.org/sign.dkim.signature.for.new.domain.html
Can it be added to the admin backend to do it through gui ?

Impossible right now, but we may implement this in iRedMail Pro in the future: https://docs.iredmail.org/pro.html

- iRedAdmin(-Pro) is running as non-privileged system user "iredadmin" for better security, it doesn't have privileges to create DKIM keys and reload / restart Amavisd service. so it's impossible.
- iRedMail Pro is the new product we're working on, it is only one single binary program but it runs 2 daemon processes, one of them runs as root user, so it has required privileges to do almost all tasks, we may implement DKIM key related tasks in this daemon process, and allow sysadmins to manage them on web console.

Re: Cannot add dkim for next domains

null@example.com (andrei_p) — Mon, 17 Jul 2023 05:22:59 +0000

Hi Cthulhu,

just found docs.iredmail.org/sign.dkim.signature.for.new.domain.html

Can it be added to the admin backend to do it through gui ?

Re: Cannot add dkim for next domains

null@example.com (Cthulhu) — Mon, 17 Jul 2023 02:25:26 +0000

so, you create a new keypair and expect that's all it needs?

did you even read the docs, there is a very nice tutorial on how to add dkim keys

Re: Cannot add dkim for next domains

null@example.com (andrei_p) — Sun, 16 Jul 2023 19:17:40 +0000

But we have 1 unique dkim key per domain on another server.

Re: Cannot add dkim for next domains

null@example.com (dave.opc) — Sun, 16 Jul 2023 19:04:54 +0000

you can use 1 dkim for all your domains on that server

Cannot add dkim for next domains

null@example.com (andrei_p) — Sun, 16 Jul 2023 18:08:39 +0000

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.3 PGSQL edition
- Deployed with iRedMail Easy or the downloadable installer? Easy
- Linux/BSD distribution name and version: Debian 11.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi Iredmail supoort,

we cannot add dkim keys for our next domains after the first domain. we added fbi.ie as the first domain after installing Iredmail Pro, but we cannot add dkim recird for next domains.

sudo amavisd-new showkeys shows only the key#1 for the first domain added - fbi.ie, though we created the key for our second domain futuremsp.ie:

amavisd-new genrsa /var/lib/dkim/futuremsp.ie.pem 1024
chown amavis:amavis /var/lib/dkim/futuremsp.ie.pem
chmod 0400 /var/lib/dkim/futuremsp.ie.pem
service amavis restart

sudo amavisd-new showkeys:

; key#1 2048 bits, i=dkim, d=fbi.ie, /var/lib/dkim/fbi.ie.pem
dkim._domainkey.fbi.ie. 3600 TXT (
"v=DKIM1; p="
"MIIBIjAN......)