Re: [dkim-milter-discuss] DNS setup problems

[Murray S. K. <ms...@se...>]

On Fri, 13 Feb 2009, Tomasz Chmielewski wrote:
> Probably what's inserted in an email would be interesting as well:
>
> X-DKIM: Sendmail DKIM Filter v2.8.1 mydomain.tld CCF1F980FC
> DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
> 	d=mydomain.tld; s=mydomain.tld; t=1234549656;
> 	bh=4pDpXBY8rCbX8+MfrklZzpQxaUsa3vSPUYjcDR3KAnU=;
> 	h=Message-ID:Date:From:MIME-Version:To:Subject:Content-Type:
> 	 Content-Transfer-Encoding;
> 	b=AbxD...
> 	 r...
> 	 c...k=

Note the selector you're using.  That means verifiers are trying to look 
up mydomain.tld._domainkey.mydomain.tld when looking for your public key.

Your key is in the right place in DNS, but your filter is configured 
incorrectly.

You've either got "-s mydomain.tld" on the command line, "Selector 
mydomain.tld" in the config file, or the filename of your key in the 
keylist is "mydomain.tld" (possibly with ".private" or ".pem" tacked onto 
the end).  The solution for the first two is to fix the obvious mistake; 
the solution for the latter is to rename your key file to "default" or 
"default.private" or "default.pem".