Hello,

I am planning to change my DKIM keys from rsa-sha1 to rsa-sha256 as advised on this forum. Previously I used an online wizard to generate rsa-sha1 keys. Will the following (take from http://www.ietf.org/rfc/rfc4871.txt - Appendix C) allow me to create rsa-sha256 keys?

$ openssl genrsa -out rsa.private 1024
rsa.private will be the file used to sign outgoing emails, won't it?

And this will create the data to be placed in DNS record for the domain.
$ openssl rsa -in rsa.private -out rsa.public -pubout -outform PEM

And having the public key, do I enter
"k=rsa256;" in the DNS server? Currently I have "k=rsa;" in there.

Just making sure I am not taking a wrong path here. Thanks!

--
Zbigniew Szalbot
www.lc-words.com

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to