1

Topic: DKIM setup on digitalOcean

==== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version: 0.8.5
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Linux/BSD distribution name and version: Ubuntu 13.10
- Related log if you're reporting an issue:
====
I used instructions as per https://www.digitalocean.com/community/ … -12-04-x64 to install iRedMail on digitalocean. My DKIM keys are not configured correctly -

root@host:/etc/dkim/keys/imved.im# amavisd-new testkeys
TESTING#1: dkim._domainkey.imved.im          => invalid (public key: not available)

I see that no ANSWER_SECTION for dkim question :


root@host:/etc/dkim/keys/imved.im# dig -t txt dkim._domainkey.imved.im

; <<>> DiG 9.9.2-P1 <<>> -t txt dkim._domainkey.imved.im
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63457
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;dkim._domainkey.imved.im.      IN      TXT

;; AUTHORITY SECTION:
imved.im.               1096    IN      SOA     NS1.DIGITALOCEAN.COM. hostmaster.imved.im. 1374576063 3600 900 1209600 1800

;; Query time: 26 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue Jul 23 11:27:10 2013
;; MSG SIZE  rcvd: 120

I added the following TXT DNS record in digital ocean :
dkim._domainkey
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9pErZoNjbPhiOAEgTNFHf7aC/3H2h5HfR1qVRtU89aNVUM7CY3s0ZfxG3RSFrnMxUvsZzaTHZ3ULSUmnoIUTzDkRM8QCLveqhXiZW2YLi3JSPjewL5iP6KcUzEmsIl9M41OAkegkPRvIxTvBuxIJVKLms53WTVkxZ1/gRV0p/2QIDAQAB

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: DKIM setup on digitalOcean

Most DNS server will keep cache for 2 (or even more) hours, i guess you didn't want for 2 hours.
It shows result moment ago:

$ dig -t txt dkim._domainkey.imved.im
...
;; ANSWER SECTION:
dkim._domainkey.imved.im. 1800    IN    TXT    "v=DKIM1\; p=...