Signing problem

From: Jason Clint <nosaj_17_at_hotmail.com>
Date: Tue, 26 Oct 2010 20:16:05 +0000

Ok so I cannot figure this out, I have been trying to get dkim headers on my emails for days and I am stumped. Hopefully someone from the list can point out whatever mistake I am obviously making. So on to the details, I currently have sendmail-8.14.4 and opendkim-2.2.1 compiled and setup with the libmilter installed. I have my key setup on my external dns like so:

mail ~ # host -t txt mail._domainkey.marlborosurvey.net
mail._domainkey.marlborosurvey.net descriptive text "v=DKIM1\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGAq3ldG6D1fJiWoXPDpKg9dx42LhQysLAgMwo7cDrBiPMJ9jKh/YIAPAdFm6lHMWOQiL+IryQH+XCMSecdEj67Uw+EIxMgVT/KNQAH9Lqax8YnM5f91XZrazHLfa8U+bzHrSw15VhXCe9wb+sDtSa3E39naEY7nW5EJRCnCEm0QIDAQAB"

and my opendkim.conf with these options:

mail ~ # cat /etc/opendkim.conf | egrep -v '(#)'
Canonicalization relaxed/simple
Diagnostics yes
Domain marlborosurvey.net
InternalHosts /etc/mail/dkim/trusted-hosts
KeepTemporaryFiles yes
KeyFile /var/db/dkim/mail.key.pem
LogWhy yes
Selector mail
Socket inet:8891_at_localhost
Syslog Yes
TemporaryDirectory /var/tmp
 UserID dkim


mail ~ # ls -al /var/db/dkim/
total 24
drwxr-xr-x 2 root root 4096 Oct 25 15:56 .
drwxr-xr-x 4 root root 4096 Oct 25 15:56 ..
-rw------- 1 root root 887 Oct 25 15:55 mail.key.pem

mail ~ # ls -al /etc/mail
total 188
drwxr-xr-x 3 root root 4096 Oct 26 13:49 .
drwxr-xr-x 81 root root 4096 Oct 26 13:51 ..
-rw-r--r-- 1 root root 485 Oct 25 15:23 access
-rw-r----- 1 root root 12288 Oct 26 12:51 access.db
lrwxrwxrwx 1 root root 12 Oct 25 14:41 aliases -> /etc/aliases
-rw-r----- 1 root root 12288 Oct 26 12:51 aliases.db
drwxr-xr-x 2 root root 4096 Oct 26 13:50 dkim
-r--r--r-- 1 bin bin 5657 Oct 25 15:53 helpfile
-rw-r--r-- 1 root root 43 Oct 25 15:42 local-host-names
-rw-r--r-- 1 root root 41 Oct 26 13:41 relay-domains
-r--r--r-- 1 root bin 42598 Oct 25 16:26 sendmail.cf
-rw------- 1 root bin 0 Oct 25 15:53 statistics
-r--r--r-- 1 root bin 41449 Oct 25 16:26 submit.cf

mail ~ # cat /etc/mail/dkim/trusted-hosts
mail.marlborosurvey.net
127.0.0.1/8


mail ~ # ls -al /etc/mail/dkim/
total 16
drwxr-xr-x 2 root root 4096 Oct 26 13:50 .
drwxr-xr-x 3 root root 4096 Oct 26 13:49 ..
-rw-r--r-- 1 root root 36 Oct 26 13:50 trusted-hosts


Also here are some tidbits from the log I was getting:

mail ~ # tail -f /var/log/maillog
Oct 26 14:05:39 mail sendmail[6142]: o9QK5dFW006142: from=root, size=26, class=0, nrcpts=1, msgid=<201010262005.o9QK5dFW006142_at_mail.marlborosurvey.net>, relay=root_at_localhost
Oct 26 14:05:40 mail sendmail[6143]: o9QK5eV3006143: from=<root_at_mail.marlborosurvey.net>, size=332, class=0, nrcpts=1, msgid=<201010262005.o9QK5dFW006142_at_mail.marlborosurvey.net>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Oct 26 14:05:40 mail opendkim[6051]: o9QK5eV3006143: localhost.localdomain [127.0.0.1] not internal
Oct 26 14:05:40 mail opendkim[6051]: o9QK5eV3006143: not authenticated
Oct 26 14:05:40 mail opendkim[6051]: o9QK5eV3006143: no signing domain match for `mail.marlborosurvey.net'
Oct 26 14:05:40 mail opendkim[6051]: o9QK5eV3006143: no signing subdomain match for `mail.marlborosurvey.net'
Oct 26 14:05:40 mail opendkim[6051]: o9QK5eV3006143: no signature data
Oct 26 14:05:41 mail sendmail[6142]: o9QK5dFW006142: to=sa-test_at_sendmail.net, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:01, mailer=relay, pri=30026, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (o9QK5eV3006143 Message accepted for delivery)
Oct 26 14:05:41 mail sendmail[6146]: STARTTLS=client, relay=smtp.sendmail.net., version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
Oct 26 14:05:42 mail sendmail[6146]: o9QK5eV3006143: to=<sa-test_at_sendmail.net>, ctladdr=<root_at_mail.marlborosurvey.net> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=esmtp, pri=120332, relay=smtp.sendmail.net. [209.246.26.21], dsn=2.0.0, stat=Sent (o9QK5ftM074087 Message accepted for delivery)
Oct 26 14:05:44 mail sendmail[6147]: o9QK5iv1006147: from=<mailnull_at_sendmail.net>, size=3838, class=0, nrcpts=1, msgid=<201010262005.o9QK5g4h074098_at_sendmail.net>, proto=ESMTP, daemon=MTA, relay=sendmail.net [209.246.26.21]
Oct 26 14:05:44 mail opendkim[6051]: o9QK5iv1006147: sendmail.net [209.246.26.21] not internal
Oct 26 14:05:44 mail opendkim[6051]: o9QK5iv1006147: not authenticated
Oct 26 14:05:44 mail opendkim[6051]: o9QK5iv1006147: no signing domain match for `sendmail.net'
Oct 26 14:05:44 mail opendkim[6051]: o9QK5iv1006147: no signing subdomain match for `sendmail.net'
Oct 26 14:05:44 mail sendmail[6147]: o9QK5iv1006147: Milter insert (1): header: Authentication-Results: mail.marlborosurvey.net; dkim=pass (1024-bit key)\n\theader.i=_at_sendmail.net header.b=h1lqFa58; dkim-adsp=pass
Oct 26 14:05:44 mail sendmail[6149]: o9QK5iv1006147: to=<root_at_marlborosurvey.net>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=34165, dsn=2.0.0, stat=Sent


mail ~ # tail -f /var/mail/root
Received on Tue Oct 26 2010 - 20:16:22 PST