DKIM-filter is signing mails with invalid DKIM signatures (v=1 instead of v=DKIM1 etc)

dkimemail

I followed the dkim-filter install instructions from Ubuntu's community help page

My dkim-filter is signing DKIM signatures with this

v=1; a=rsa-sha256; c=simple/simple; d=my.domain.com;s=mail; t=1312301159;bh=*hashstring omitted*=;h=Subject:Message-Id:Date:From:To;b=*key omitted*

GMail and Hotmail both say the DKIM's invalid (bad format)
the dkim checker says version should be v=DKIM1 and not v=1, a is not a defined field, c is not a defined field, d is not a defined field, and mail is not a valid service type, among a bunch of other stuff

Did I misconfigure something in dkim-filter?

Answer:

Turns out my registrar only allows 64 characters in the TXT entry boxes..man this sucks

Best Answer

You've got something wrong. The dkim-checker checks DKIM-DNS records, not DKIM signatures. Your signature looks pretty good (except the omitted values).

Related Solutions

Emails is marked as spam

It sounds like your PHP scripts are not sending the mail using the local MTA, while your Outlook client is. It's that MTA that needs to apply the DKIM signature to each message before it passes to another organization's servers. So, check your PHP configuration and code.

Publishing long domain key records in bind9

You are using commas to separate your key/value pairs in your record instead of semi-colons. Change it to:

a9d04665528b593d263a6e5256648c99._domainkey IN  1800 TXT (
         "k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/ZfhxSI/A"
         "bqgh0amM8ylrlosirWeKShUhq7fg12aYmRwOqq9hIzO0Fcz1BzfgHVu6HU++rC5"
         "QoUK0JQK/nk4jwkDgvG2di2ZYmAvEbY/VeiK1x/TG0p1Iczr2k6Bj0gEAb/YGD2"
         "YbwrwAi4bDXwoPsYuuNn9TB3jjyWKu/dvOsqhff1/4Wc+FkOi0ClvgrXiklN28X"
         "TLjyjSyU794ntIoegXxrfwcwkhfPMvuqcnhfIC0Z8L71M4WR4SoHyNHVfBtNlUv"
         "VNROiXlMxtxnNQvfViSwz6LC8bYIxeAba3hSXPTChKu3qZtfR0o3jFwEWAfLQdg"
         "Ixler0jMEoAyJmfQIDAQAB")

Also, I'll note that in my particular zone file, I specifically declare the version as v=DKIM1 and I think you should too. On a side note, I do not wrap the record with ( ) because I just do it all as one long line:

record._domainkey IN 1800 TXT "v=DKIM1;blah" "blah2" "blah3"

It's a personal preference, and I realize now that yours is certainly much more readable.

Best Answer

Related Solutions

Emails is marked as spam

Publishing long domain key records in bind9

Related Topic