I have in postfix configured submission with opendkim:
submission inet n - n - - smtpd
-o smtpd_recipient_restrictions=permit_tls_clientcerts,reject
-o smtpd_tls_security_level=encrypt
-o smtpd_tls_auth_only=no
-o smtpd_tls_req_ccert=yes
...
-o smtpd_milters=unix:/var/run/opendkim/opendkim.sock
Well, it works, except that opendkim says "not authenticated" :
postfix/smtpd[9044]: Trusted TLS connection established from unknown[1.2.3.4]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
opendkim[8590]: x: [1.2.3.4] [1.2.3.4] not internal
opendkim[8590]: x: not authenticated
opendkim[8590]: x: no signature data
When I submit mail via 127.0.0.1:25, opendkim makes OK signature.