Fornire record DKIM
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	ferdi2005
	Jan 6 2021, 15:00

Description

Fornire DKIM per wikimedia.lol

Related Objects

Mentioned Here: P13 DKIM key generator for Postfix

Event Timeline

ferdi2005 created this task.Jan 6 2021, 15:00

ferdi2005 created this object in space S1 Public.

Restricted Application added a project: User-valerio.bozzolan. · View Herald TranscriptJan 6 2021, 15:00

Dear Ferdino,

Having said I don't have any f****ng idea about why you need that domain, anyway it's your business. Have fun!

WARNING: From great powers, great responsibility!

Please create a DNS TXT record for:

wikipedia202101._domainkey.wikimedia.lol

With this value:

v=DKIM1; h=sha256; k=rsa; "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJW6mb4Lkne47vc5nddr5nULdy4rJ6+qx/KFUFDEeQBmehIMeWNw4mQKXeSuhM74dV47mTkG8WnoAEqMOhuPgj3827LyMpoFjYpGP4SNZJaH/mKF+aCTlAF9+8v6mmPGYTn1ZlPG2Xvzpman9Ewla8bU5+cyyKfKtqVXB6PtO1MQIDAQAB

Then you can test it with:

$ opendkim-testkey -d 'wikipedia.lol' -s 'wikipedia202101' -vvv

Feel free to comment with the result of your test (but wait a couple of hours first).

Note that I've generated the DKIM key in the following way:

$ ssh gargantua.reyboz.it
$ ./dkim.sh 
Please insert the domain name and press enter
wikipedia.lol
opendkim-genkey: generating private key
opendkim-genkey: private key written to wikipedia202101.private
opendkim-genkey: extracting public key
opendkim-genkey: DNS TXT record written to wikipedia202101.txt
changed ownership of '/etc/postfix/dkim/dkimkeys/wikipedia202101.private' from root:root to opendkim:opendkim
changed ownership of '/etc/postfix/dkim/dkimkeys/wikipedia202101.txt' from root:root to opendkim:opendkim
wikipedia202101._domainkey	IN	TXT	( "v=DKIM1; h=sha256; k=rsa; "
	  "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJW6mb4Lkne47vc5nddr5nULdy4rJ6+qx/KFUFDEeQBmehIMeWNw4mQKXeSuhM74dV47mTkG8WnoAEqMOhuPgj3827LyMpoFjYpGP4SNZJaH/mKF+aCTlAF9+8v6mmPGYTn1ZlPG2Xvzpman9Ewla8bU5+cyyKfKtqVXB6PtO1MQIDAQAB" )  ; ----- DKIM key wikipedia202101 for wikipedia.lol
$ systemctl reload opendkim

I've used this script:

P13 DKIM key generator for Postfix

1	#!/bin/bash
2	#
3	# Generate a DKIM key for Postfix
4	#
5	# Project info
6	# https://gitpull.it/w/kiss_libre_hosting_panel/
7	#
8	# Updates
9	# https://gitpull.it/P13
10	#
11	# This script is in public domain.
12	# 2020 - Valerio Bozzolan
13	###################################################
14
15	# die in case of errors
16	set -e
17
18	# expected pathnames
19	POSTFIX=/etc/postfix
20	DKIM="$POSTFIX"/dkim
21	KEYTABLE="$DKIM"/keytable
22	SIGNINGTABLE="$DKIM"/signingtable
23	DKIM_KEYS="$DKIM"/dkimkeys
24
25	# no domain no party
26	domain="$1"
27	if [ -z "$domain" ]; then
28	echo "Please insert the domain name and press enter"
29	read domain
30	fi
31
32	# no selector no party
33	selector="$2"
34	if [ -z "$2" ]; then
35	date="`date +%Y%m`"
36
37	# make domain shorter
38	domainshort="${domain:0:10}"
39
40	# strip dots
41	domainshort=$(echo "$domainshort" \| sed 's/\.//g')
42
43	selector="$domainshort""$date"
44	fi
45
46	# expected pathnames
47	keytablename="$selector"key
48	expected_filename_prv="$selector".private
49	expected_filename_txt="$selector".txt
50	expected_filepath_prv="$DKIM_KEYS"/"$expected_filename_prv"
51	expected_filepath_txt="$DKIM_KEYS"/"$expected_filename_txt"
52
53	# key generation
54	opendkim-genkey --verbose --bits=1024 "--domain=$domain" "--selector=$selector" "--directory=$DKIM_KEYS"
55
56	# this line should be at the beginning of the file
57	sed -i "1s/^/*@$domain $keytablename\n/" "$SIGNINGTABLE"
58
59	# this line can be appended at the end of the table
60	echo "$keytablename $domain:$selector:$expected_filepath_prv" >> "$KEYTABLE"
61
62	# eventually fix privileges
63	chown --verbose opendkim: "$expected_filepath_prv" "$expected_filepath_txt"
64
65	cat "$expected_filepath_txt"
66	echo
67	echo "Done!"
68	echo " systemctl reload opendkim"
69	echo " opendkim-testkey -d '$domain' -s '$selector' -vvv"

Fornire record DKIMClosed, ResolvedPublicActions

Description

Related Objects

Event Timeline

Fornire record DKIM
Closed, ResolvedPublic
Actions