DKIM , why isn't it validating?

[youradds]

I'm trying to work out what I'm doing with the whole DKIM stuff. This is what I'm running on the server:

Code: Select all

v-list-mail-domain-dkim-dns fatpeter chambresdhotesfrance.com
RECORD            TTL         TYPE      VALUE
------            ---         ----      -----
_domainkey        3600   IN   TXT      "t=y; o=~;"
mail._domainkey   3600   IN   TXT      "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFOoGLMp7Wtsxx2QZgkwgZSh3G\n7f6YyOkPYwJrfX1iR+JrpMG7UuTH5oUq6dgLBzktrHc7A5NXV9EQCczlzOsf65Q/\nxfehC42h2JiVKvh7oMPELGhWt119/U6c1QFVx/78GvOAhcRamOtIiUaT7QHiWvqf\nXsGtN1aJjn30KEEzbwIDAQAB"

Because I'm running my nameserver at my hosts end, I've then added the records into the DNS there (as TXT);

Code: Select all

_domainkey 	t=y; o=~;

mail._domainkey 
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFOoGLMp7Wtsxx2QZgkwgZSh3G\n7f6YyOkPYwJrfX1iR+JrpMG7UuTH5oUq6dgLBzktrHc7A5NXV9EQCczlzOsf65Q/\nxfehC42h2JiVKvh7oMPELGhWt119/U6c1QFVx/78GvOAhcRamOtIiUaT7QHiWvqf\nXsGtN1aJjn30KEEzbwIDAQAB

...yet when I go to test it on mail-tester.com, I get:

The DKIM signature of your message is:

v=1;
a=rsa-sha256;
q=dns/txt;
c=relaxed/relaxed;
d=chambresdhotesfrance.com;
s=mail;
h=Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Message-ID:Subject:From:To;
bh=2e2ZvID4JPU42t2SkE+wT0biD7Ja0P6Hgnrd3rqAKHc=;
b=IBSfw+4BTl68ZaevBrU+Nuaz3NTZr1kL9mw19UsCC5rwLmGUCL1HrY5Z84C1Zug+zFQY78o7zfRZGxR+AOdJMt+wGAw4y2T4gk/946m9Z1aIDrR/9G8QIhJt8F0SFmVXEvB9aHkZQf/mXlMgcZvxXo/+FH+UX6XzVo/Py2olYeA=;


Your public key is:

"k=rsa;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFOoGLMp7Wtsxx2QZgkwgZSh3G\\n7f6YyOkPYwJrfX1iR+JrpMG7UuTH5oUq6dgLBzktrHc7A5NXV9EQCczlzOsf65Q/\\nxfehC42h2JiVKvh7oMPELGhWt119/U6c1QFVx/78GvOAhcRamOtIiUaT7QHiWvqf\\nXsGtN1aJjn30KEEzbwIDAQAB"

I don't get it... what am I doing wrong? :/

Cheers

Andy

[jimmyeao]

Did you manage to fix this? I have the same issue

[jimmyeao]

https://github.com/serghey-rodin/vesta/issues/320

[youradds]

Hi,

Yeah - the \n in the output is the problem. I wrote a little perl script to update the DNS record for the DKIM stuff, so I just replaced \n with a null value, so it has the correct value. I guess it needs fixing in the source though (not sure if it has already been dealt with?)

Cheers

Andy