DKIM Woes Again

[marcelocaetano]

I found that I can't just take the DKIM public key output from Vesta and paste it straight to my DNS record, so I altered mine to work. Here's what I did in my Vesta install to pull the DNS record ready to go, ready to copy and paste to my DNS editor:

/usr/local/vesta/bin/v-list-mail-domain-dkim-dns

Comment out these lines:

Code: Select all

    echo -e "\t\"_domainkey\": {"
    echo "        \"TTL\": \"3600\","
    echo "        \"TXT\": \"'t=y; o=~;'\""
    echo -e "\t},"

By replacing them as:

Code: Select all

    #echo -e "\t\"_domainkey\": {"
    #echo "        \"TTL\": \"3600\","
    #echo "        \"TXT\": \"'t=y; o=~;'\""
    #echo -e "\t},"

Then I commented out this line:

Code: Select all

    echo "_domainkey      3600    IN    TXT    \"t=y; o=~;\""

Replacing it as:

Code: Select all

    #echo "_domainkey      3600    IN    TXT    \"t=y; o=~;\""

Next, I changed this line:

Code: Select all

    pub=$(cat $USER_DATA/mail/$domain.pub | sed ':a;N;$!ba;s/\n/\\n/g')

To this:

Code: Select all

    pub=$(cat $USER_DATA/mail/$domain.pub | sed '/^-/d' | awk '{printf "%s", $1}')

Now I run this from CLI...

Code: Select all

v-list-mail-domain-dkim-dns [username] [domain]

And I get a return like this:

Code: Select all

mail._domainkey 3600    IN    TXT    "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0xV1NRp5dEcBG0f8WQBTtRHSIjwJx7Qzvh7uwD6XYGkHhQUYfzhj+0s/heNCgUaWKgaRheN8+wDrNm6VpGo/3ZUylWpEReE3GmS1ir/rbBjfNLxTBYUl9qVTo9F2iJ1n1qU2DeJaAAWGzwaqfBdVZVr1D9h6jdJVGLx3wAf+mjQIDAQAB"

Probably more than you need, but to share, I then made this bash script on our central server so that other guys who handle support could pull a DNS record for a client by typing "dkim domainname" in:

Code: Select all

#!/bin/bash
# Usage: dkim domainname
user=$(ssh [email protected] -p 2200 "/usr/local/vesta/bin/v-search-domain-owner $1")
ssh [email protected] -p 2200 "/usr/local/vesta/bin/v-list-mail-domain-dkim-dns $user $1"

This worked for someone else?

I have the same problem.

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check: permerror
DomainKeys check: neutral
DKIM check: pass
Sender-ID check: permerror
SpamAssassin check: ham

I would like some help or any idea to adjust correctly.

[Messiah]

I have VestaCP and DKIM set automatically, private key is in the /home/admin/conf/mail/[domain]/dkim.pem
What should I put to the DNS record i.e. how to get public key?

[carlosal]

This works for me. Thanks !!!