A sáb, 11-02-2023 às 18:33 +0100, Matus UHLAR - fantomas escreveu:
> > > On February 11, 2023 3:41:06 PM UTC, nj140...@yahoo.com wrote:
> > > > Trying to send an email from n...@complete-web-solutions.com on
> > > > the
> > > > host sv9.complete-web-solutions.com results in the following
> > > > messages
> > > > in mail.log:
> > > > ...
> > > 
> > > > But opendkim seems correctly configured because the command:
> > > > opendkim-testkey -d complete-web-solutions.com -s 202302081 -v
> > > > -x
> > > > /etc/opendkim.conf
> > > > gives the result:
> > > > opendkim-testkey: key secure
> 
> > A sáb, 11-02-2023 às 16:37 +0000, Scott Kitterman escreveu:
> > > You only tested the availability of the public key, but your
> > > error is
> > > with the private key.  See the -k option.
> > > 
> > > http://www.linuxcertif.com/man/8/opendkim-testkey/
> 
> On 11.02.23 17:24, Nicholas Jacobs wrote:
> > No, I checked that too.
> > opendkim-testkey -d complete-web-solutions.com -k
> > /etc/dkimkeys/202302081.private -s 202302081 -v -x
> > /etc/opendkim.conf
> > gives:
> > opendkim-testkey: key secure
> 
> can the user of running opendkim process (on debian/ubuntu it's user 
> "opendkim") read the private key?
> 
> ls -la /etc/dkimkeys/
> 
 # ls -la /etc/dkimkeys/ gives:
drwx------ 2 opendkim opendkim 4096 Feb 8 17:10 .
drwxr-xr-x 91 root root 4096 Feb 11 14:43 ..
-rw------- 1 opendkim opendkim 1704 Jan 28 18:08 202208250.private
-rw------- 1 opendkim opendkim 1679 Dez 30 18:23 202212301.private
-rw------- 1 opendkim opendkim 518 Dez 30 18:23 202212301.txt
-rw------- 1 opendkim opendkim 1679 Feb 8 10:51 202302081.private
-rw-r--r-- 1 opendkim opendkim 392 Feb 8 10:54 202302081.txt
-rw-r--r-- 1 opendkim opendkim 218 Feb 8 11:20 keytable
-rw-r--r-- 1 root root 664 Nov 6 2015 README.PrivateKeys
-rw-r--r-- 1 opendkim opendkim 134 Feb 8 16:25 signingtable

So yes, opendkim has read access to everything.

Reply via email to