Re: key retrieval failed

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Fri, 24 Jan 2014 11:24:43 -0800 (PST)

On Fri, 24 Jan 2014, john espiro wrote:
> I keep seeing errors in my logs that say things like this:
> opendkim[23395]: s0OGvk7d005863: key retrieval failed (s=key1, d=pLNoauBPhu.if
> feent.net)
> Google searches only seem to indicate that I can solve this by adding: "On-DNS
> Error accept"
> Can anyone tell me why this error occurs, if I should add that option, and wha
> t the ramifications of doing so are?

There isn't a key in the DNS by that name. OpenDKIM should just deliver
that message since the default for On-KeyNotFound defaults to the "accept"
action.

Is the issue that you're seeing this logged, or that messages are being
temp-failed or rejected?

-MSK
Received on Fri Jan 24 2014 - 19:25:01 PST

This archive was generated by hypermail 2.3.0 : Fri Jan 24 2014 - 19:27:01 PST