Turns out my registrar only allows 64 characters in the TXT entry boxes..man this sucks


I followed the dkim-filter install instructions from ubuntu's community help page

My dkim-filter is signing DKIM signatures with this

v=1; a=rsa-sha256; c=simple/simple; d=my.domain.com;s=mail; t=1312301159;bh=*hashstring omitted*=;h=Subject:Message-Id:Date:From:To;b=*key omitted*  

gmail and hotmail both say the dkim's invalid (bad format) the dkim checker says version should be v=DKIM1 and not v=1, a is not a defined field, c is not a defined field, d is not a defined field, and mail is not a valid service type among a bunch of other stuff

Did I misconfigure something in dkip-filter?

link|improve this question
Postfix can not do anything with DKIM. Therefore it delegates everything to dkim-filter. This is why I'm going to edit your question. – mailq Aug 2 '11 at 16:38
feedback

2 Answers

up vote 0 down vote accepted

You've got something wrong. The dkim-checker checks DKIM-DNS records, not DKIM signatures. Your signature looks pretty good (except the omitted values).

link|improve this answer
Oh. Maybe the DNS records haven't propagated yet? Can I check that? – CheapSteaks Aug 2 '11 at 16:50
Sure. dig for it. – mailq Aug 2 '11 at 16:53
This is probably a dumb question, but when I enter the DKIM TXT record, should it be "mail._domainkey.my.domain.com." with the period at the end, or without? The community help page shows it having a period at the end, but I don't understand why it's there, and I can't tell either way if it's not working because of the delay in propagation or of it's a problem somewhere else :( – CheapSteaks Aug 2 '11 at 17:16
It must work with the dot in the end and without the dot in the end. But to make sure you really lookup the right entry please add the dot in the end. It makes sure that you lookup a FQDN. – mailq Aug 3 '11 at 8:50
feedback

This question is a close duplicate of this one. Follow the instructions there.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.