Changes

From SME Server
Jump to navigationJump to search
1,190 bytes added ,  19:48, 24 July 2016
Line 1,097: Line 1,097:  
Type : TXT
 
Type : TXT
   −
Text : "k=rsa; p=<key text>; t=y"
+
Text : "v=DKIM1;k=rsa; p=<key text>; t=y"
      Line 1,113: Line 1,113:     
See also : [[bugzilla:8251]] [[bugzilla:8252]]
 
See also : [[bugzilla:8251]] [[bugzilla:8252]]
 +
 +
==DKIM Setup - qpsmtpd version = 0.96==
 +
 +
Version 0.96 and above supports DKIM natively without the need for extra plugins.
 +
 +
However you have to generate the DKIM signatures, enable the DKIM signing ang promulgate the DNS TXT entries to support it.
 +
 +
Create the signature:
 +
/usr/bin/openssl genrsa -out /home/e-smith/dkim_keys/default/private 1024
 +
/usr/bin/openssl rsa -in /home/e-smith/dkim_keys/default/private \
 +
        -out /home/e-smith/dkim_keys/default/public -pubout
 +
chown qpsmtpd:qpsmtpd /home/e-smith/dkim_keys/default/private
 +
chmod 400 /home/e-smith/dkim_keys/default/private
 +
signal-event email-update
 +
 +
Enable the signing:
 +
db configuration setprop qpsmtpd DKIMSigning enabled
 +
signal-event email-update
 +
 +
and then run:
 +
qpsmtpd-print-dns <domain name>
 +
 +
to show the DNS entry(s) required.
 +
 +
Then you have to update your DNS
 +
 +
{{Tip box|msg=You can verify that your settings are correct by sending an email to [mailto:check-auth@verifier.port25.com check-auth@verifier.port25.com], a free service the purpose of which is to verify if your domain does not contradict mail policies. Please check the answer carefully. See [[bugzilla:4558#c6]] }}
 +
 +
also see [[bugzilla:9694]]
    
==Domain Keys==
 
==Domain Keys==

Navigation menu