bug report: DKIM key mismatch
📝 Preliminary Checks
- [x] I tried searching for an existing issue and followed the debugging docs advice, but still need assistance.
👀 What Happened?
DKIM keys say mismatch for every email I send.
Steps i took:
- log into docker container
- setup config dkim domain 'mydomain.win'
- this creates new DKIM keys in /tmp/.... folder
- remove container
- recreate container and start
- confirmed that all files in /etc/opendkim/keys are updated (copied from /tmp folder)
- Confirmed that DNS records are correct.
- Sending email gives DKIM error:
- `Authentication-Results: mail.mydomain.win;
dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=mydomain.win [email protected] header.a=rsa-sha256 header.s=mail header.b=kdlnzb/U; dkim-atps=neutral
👟 Reproduction Steps
No response
🐋 DMS Version
latest
💻 Operating System and Architecture
Debian
⚙️ Container configuration files
📜 Relevant log output
Found the problem: the DKIM key that is generated is multiple lines long and although that passes all DNS key checks and DNS providers accept the format as correct, it does not pass a match test between a DKIM signed mail and the DNS record. Only when flattening the key it works. -> strange
Only when flattening the key it works. -> strange
You are referring to flattening at the DNS record? That is required for some DNS providers, but doesn't work for others, we document this:
This issue has become stale because it has been open for 20 days without activity. This issue will be closed in 10 days automatically unless:
- a maintainer removes the
meta/stalelabel or adds thestale-bot/ignorelabel - new activity occurs, such as a new comment
This issue was closed due to inactivity.