Re: rsa routines:INT_RSA_VERIFY:bad signature

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Wed, 11 Sep 2013 16:30:39 -0700 (PDT)

On Wed, 11 Sep 2013, john espiro wrote:
> Bot domains' DNS has a key: mail._domainkey.<domain>.com with the dkim
> signature in them.  I use the same one for each domain.

As long as a TXT query to mail._domainkey.<domain>.com resolves, and the
public key in there matches the private key with which you're signing, you
should be golden.

There's no rule that says the From: domain and the DKIM domain have to
match.

-MSK
Received on Wed Sep 11 2013 - 23:30:55 PST