Tạo key signing key cho opendkim

Question

hướng tạo key signing key cho opendkim

Answer 1

opendkim-genkey -r -s <tên domain> -d <domain.com>

ví dụ:

opendkim-genkey -r -s myselector -d example.com

- sau khi tạo xong mở file thêm

/etc/opendkim/opendkim.conf

Domain                  example.com
KeyFile                 /path/to/keys/server1.private
Selector                myselector
Socket                  inet:8891@localhost
UserID                  opendkim

- sau đó tạo một DNS TXT

myselector._domainkey   IN	 TXT	"v=DKIM1; k=rsa; s=email; p=...................."

- Sau đó kiểm tra

host -t TXT myselector._domainkey.example.com

 

- sau đó gán cho postfix mở file main.cf

non_smtpd_milters=inet:127.0.0.1:8891
smtpd_milters=inet:127.0.0.1:8891

 

hoặc

smtp      inet  n       -       n       -       -       smtpd
  -o smtpd_client_connection_count_limit=10
  -o smtpd_milters=inet:127.0.0.1:8891

submission inet n       -       n       -       -       smtpd
  -o smtpd_enforce_tls=no
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o smtpd_sasl_path=smtpd
  -o cyrus_sasl_config_path=/etc/sasl2
  -o smtpd_milters=inet:127.0.0.1:8891

Answer 2

hi,

mkdir /etc/opendkim/keys/<domain.com>
opendkim-genkey -D /etc/opendkim/keys/<domain.com>/ -d <domain.com> -s infomail -r
chown -R opendkim:opendkim /etc/opendkim/keys/<domain.com>

#kiem tra neu có là ok

ll /etc/opendkim/keys/thienhoa.info/infomail.private