On Sat, Feb 11, 2023 at 03:41:06PM +0000, nj140...@yahoo.com wrote: > opendkim[3223]: F29AA21C4C: SSL error:0D07207B:asn1 encoding > routines:ASN1_get_object:header too long > opendkim[3223]: F29AA21C4C: dkim_eom(): resource unavailable: > d2i_PrivateKey_bio() failed
The ASN.1 encoding (after base64 decoding the PEM input) of the private key is malformed. On Sat, Feb 11, 2023 at 05:48:45PM +0000, Nicholas Jacobs wrote: > # ls -la /etc/dkimkeys/ gives: > -rw------- 1 opendkim opendkim 1704 Jan 28 18:08 202208250.private > -rw------- 1 opendkim opendkim 1679 Dez 30 18:23 202212301.private > -rw------- 1 opendkim opendkim 1679 Feb 8 10:51 202302081.private There are three private keys there. Report the output of: $ cd /etc/dkimkeys/ $ for pk in 202208250 202212301 202302081; do printf "%s: " "$pk" openssl pkey -in "${pk}.private" -pubout -outform DER | wc -c done Which should report the DER byte count of the corresponding public keys. If the key is malformed, an error will be reported. -- Viktor.