Geert Hendrickx

You can still request RSA certificates for legacy applications where needed, this shouldn't hold a better default for everyone else.

They're not identical, mine takes into account older openssl versions not supporting `genpkey` (but returning 0).

You overlooked my second commit https://github.com/trusteddomainproject/OpenDKIM/pull/135/commits/ce8a278f9708714fceb016e97859439417cf119d.

See https://github.com/trusteddomainproject/OpenDMARC/issues/202 which applies to this PR as well.

A message is now rejected with (for example) `550 5.7.1 RFC5322 requirement error: not exactly one Date field` instead of previously: `550 5.7.1 Command rejected`

See also https://github.com/trusteddomainproject/OpenDKIM/pull/135.