Murray S. Kucherawy schrieb:
> On Fri, 13 Feb 2009, Tomasz Chmielewski wrote:
>> So I can't have the key file called "default" for all of them, their
>> names have to be unique.
> 
> Why not?  You could have a "default" selector in each domain, all using 
> the same key if that's what you want.

How do I make a key that is valid for all domains?

dkim‐genkey seems to require -d <domain> option.

I tried to use one domain's key for another (same private key for signing, same 
public key in DNS), but I get:

Authentication-Results: my.mta.tld (amavisd-new); dkim=softfail (fail,
        OpenSSL error: data too large for key size)
        [email protected]


DKIM-Signature: v=1; a=rsa-sha1; c=; d=mydomain.tld; h=message-id
        :date:from:mime-version:to:subject:content-type:
        content-transfer-encoding; s=default; bh=u...
        1Wic=; b=Qw+...
        ...
        ...Fw=

For the first domain, signing and verification works fine.


-- 
Tomasz Chmielewski
http://wpkg.org

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to