Re: Signing problems with OpenDKIM on Ubuntu

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Wed, 24 Apr 2013 10:32:25 -0700 (PDT)

On Tue, 23 Apr 2013, Jim Fenton wrote:
> I think I'm all set now with my shiny new 1024 bit key. I'm still
> getting some verification errors but I think that's because a few slave
> name servers don't have the key record yet.
>
> Thanks for all the help! I wonder if this "private key too small" error
> needs to be syslogged a bit more loudly.

Yes indeed. This is fixed for 2.8.3, which I'll push out later this week
(it was in the hopper already for some lesser things). I currently have
the default action set to temp-fail when this happens; should it be
"accept" (pass the message anyway)? Something is logged in either case.

-MSK
Received on Wed Apr 24 2013 - 17:32:54 PST