Re: SigningTable

From: Andy Wilson <andrewgwilson_at_gmail.com>
Date: Fri, 16 Aug 2013 13:58:09 +1200

Hi Fred

I have mine setup as:
example.com selector._domainkey.example.com

so [domain] [full DNS path for selector]

Reading opendkim.conf documentation, the [full DNS path for selector] is
set to match what's in the KeyTable

So again my setup for KeyTable:
selector._domainkey.example.com example.com:selector:/path/to/privatekey.key

As far as I understand the second part of the SigningTable only has to
match the first part of the KeyTable.

Hope that makes sense!


Andy


On 16 August 2013 13:07, Scott Kitterman <ietf-dkim_at_kitterman.com> wrote:

> On Thursday, August 15, 2013 19:44:29 Fred White wrote:
> > Hello List,
> >
> > I need a bit of help here.
> >
> > Recently my server was upgraded and re-imaged. Therefore, I am not
> > trying to get Opendkim signing mails again but is having a bit of issue.
> >
> > My present version is 2.6.4 and this is because its the latest in Debian
> > squeeze-backport.
>
> Actually, 2.6.8 is the latest.
>
> > I am seeing deferent examples of the "SigningTable" and is wondering
> > which is the correct format "*_at_example.com mail._domainkey.domain.com"
> > or just "*_at_example.com example.com".
>
> From reading man 5 opendkim.conf, it looks to me like the latter is
> correct.
>
> Scott K
>
>


-- 
Regards
Andy
Received on Fri Aug 16 2013 - 01:58:24 PST

This archive was generated by hypermail 2.3.0 : Fri Aug 16 2013 - 02:00:02 PST