1

Topic: DKIM KEY Issue

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): latest
- Linux/BSD distribution name and version:  ubuntu 16.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello I am having issue adding signature for DKIM. I follow instructions however I am having fail(bad RSA signature) when I try to run amavisd-new testkeys.

/etc/amavis/conf.d/50-user shows:
    '.' => {d => 'waterswhitevans.com',
            a => 'rsa-sha256',
            c => 'relaxed/simple',
            ttl => 30*24*3600 },

amavisd-new showkeys gives output as follows:
; key#1 1024 bits, i=dkim, d=waterswhitevans.com, /var/lib/dkim/waterswhitevans.com.pem
dkim._domainkey.example.com.    3600 TXT (
  "v=DKIM1; p="
  "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBHYFFunXbuF5bU/PBozj5IfVR"
  "bZZckRH4hmYZuO0qbUW8SzaBR+rGo4d98lzaQm7o7lrBhq4fM4anzw8cIe4XRUYP"
  "/7RBj8aAyS13NWi+yhxETRx18/geUvYiYIG0SwhPQ4QIl72nj8wrr/t13IYZNyka"
  "R+aPm3ntwQPz6ns3dwIDAQAB")

I have set TXT dns entry with key (without quotes and spaces)

Worth noting that I have 2 domains (main one mail.example.com that have postmaster, and other one mail.example2.com which is set from iredadmin)

as I am not sure what I am doing wrong,
I have set DNS TXT Entry with key string for
dkim._domainkey.example.com
dkim._domainkey.mail.example.com
example.com
mail.example.com

I think I have given proper infromation about my issue,however if you may need futher information and can help me I'll provide anything else that may be needed. Thank you alot.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: DKIM KEY Issue

- What's the result of command "amavisd-new testkeys"?
- You need to make sure TXT type DNS record "dkim._domainkey.<mail-domain-name>" is correctly populated.