Re: Signing multiple domains best practice

From: James R. Marcus <jmarcus_at_edhance.com>
Date: Wed, 17 Feb 2010 11:13:17 -0500

This is what I have done. Should I comment out the Selector line in the opendkim.conf?

Thanks,
James
On Feb 16, 2010, at 6:49 PM, SM wrote:

Hi James,
At 14:53 16-02-10, James R. Marcus wrote:
I just changed my default email to jmarcus_at_studentsonly.com<mailto:jmarcus_at_studentsonly.com>. On my
relay I created a new key and added it to the keylist, restarted
opendkim and reloaded postfix. I sent a email to my self at gmail
and the header had my edhance key in the header. My selector in
opendkim.conf is set to the edhance key.

There is a selector and a domain name (d=). The two are used to
construct a the DNS query which retrieves the public key.

Should I sign StudentsOnly email with an Edhance key?

Sign it with the key for StudentsOnly.

I would prefer to use a different key, how do I configure opendkim
to sign with the correct key?

In opendkim.conf:

KeyList /path/keylist.txt

In keylist.txt:

*_at_edhance.com:edhance.com:/path/private.key
*_at_studentsonly.com:studentsonly.com:/path/private.key

You can use the same public and private key or else have different
keys. Opendkim will use the filename as the selector. You could
rename the "private.key" file to match he name you want to use as the selector.

Regards,
-sm


:: James R. Marcus | Director, IT Operations
:: Edhance | jmarcus_at_edhance.com<x-msg://103/jmarcus_at_edhance.com>
:: v: 617-475-5360 | m: 914-772-8533
:: web: www.edhance.com<http://www.edhance.com/>
Received on Wed Feb 17 2010 - 16:13:32 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:19:46 PST