Generating DKIM Key - Revision history

Favyen Bastani at 17:36, 14 July 2015

2015-07-14T17:36:23Z

Favyen Bastani at 17:18, 14 July 2015

2015-07-14T17:18:54Z

Favyen Bastani at 17:18, 14 July 2015

2015-07-14T17:18:29Z

Favyen Bastani at 17:18, 14 July 2015

2015-07-14T17:18:23Z

Favyen Bastani at 17:02, 14 July 2015

2015-07-14T17:02:44Z

Favyen Bastani at 17:02, 14 July 2015

2015-07-14T17:02:19Z

Favyen Bastani: Created page with "First, install the package containing opendkim-genkey. On Debian/Ubuntu: apt-get install opendkim-tools Now, generate the keypair (replace example.com with your dom..."

2015-07-14T17:02:08Z

Created page with "First, install the package containing opendkim-genkey. On Debian/Ubuntu: <nowiki>apt-get install opendkim-tools Now, generate the keypair (replace example.com with your dom..."

New page

First, install the package containing opendkim-genkey. On Debian/Ubuntu:

<nowiki>apt-get install opendkim-tools

Now, generate the keypair (replace example.com with your domain name):

<nowiki>opendkim-genkey -t -s mail -d example.com

Here, "-s mail" indicates that we are using "mail" for the selector name, and "-t" indicates we will run DKIM in [http://www.dkim.org/specs/rfc4871-dkimbase.html#key-text test mode]; most DKIM users opt for test mode, but you can remove the "-t" flag if desired, in this case mail servers verifying DKIM will reject mail that isn't signed.

The command will generate a public key in mail.txt and private key in mail.key.

Create a DNS TXT record at "mail._domainkey.example.com." based on the public key:

<nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"

@@ Line 5: / Line 5: @@
 Now, generate the keypair (replace example.com with your domain name):
-  <nowiki>opendkim-genkey -t -s mail -d example.com</nowiki>
+  <nowiki>opendkim-genkey -s mail -d example.com</nowiki>
-Here, "-s mail" indicates that we are using "mail" for the selector name, and "-t" indicates we will run DKIM in [http://www.dkim.org/specs/rfc4871-dkimbase.html#key-text test mode]; most DKIM users opt for test mode, but you can remove the "-t" flag if desired, in this case mail servers verifying DKIM will reject mail that isn't signed.
+Here, "-s mail" indicates that we are using "mail" for the selector name. The command will generate a public key in mail.txt and private key in mail.private.
-−
 The command will generate a public key in mail.txt and private key in mail.private.
 Create a DNS TXT record at "mail._domainkey.example.com." based on the mail.txt file:

@@ Line 11: / Line 11: @@
 The command will generate a public key in mail.txt and private key in mail.private.
-Create a DNS TXT record at "mail._domainkey.example.com." based on the public key:
+Create a DNS TXT record at "mail._domainkey.example.com." based on the mail.txt file:
   <nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"</nowiki>
 Finally, copy the mail.private contents to the private key text area.

← Older revision		Revision as of 17:18, 14 July 2015
Line 15:		Line 15:
	<nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"</nowiki>		<nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"</nowiki>

−	Finally, copy the mail.~~key~~ contents to the private key text area.	+	Finally, copy the mail.private contents to the private key text area.

← Older revision		Revision as of 17:02, 14 July 2015
Line 14:		Line 14:

	<nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"</nowiki>		<nowiki>mail._domainkey.example.com. IN TXT "k=rsa; p=PpYHdE2tevfEpvL1Tk2dDYv0pF28/f 5MxU83x/0bsn4R4p7waPaz1IbOGs/6bm5QIDAQAB"</nowiki>
		+
		+	Finally, copy the mail.key contents to the private key text area.