I just saw your message and I do not know if you solved it or not.

I recently had an issue with my keys and Gmail. They increased the key length requirement and mine were being rejected because of that. Below is an article of this.

http://blog.returnpath.com/blog/ken-takahashi/google-doubles-down-on-weak-dkim-keys-what-you-need-to-do-now-to-be-compliant

After updating my keys to a longer length, I had to wait for google to update their cache servers so that they saw the new key. I always make sure the key can be seen by google's servers by querying 8.8.8.8 and 8.8.4.4 for the text record. Also, I had to verify that I was using the correct selector in my signconf.xml (I created a new selector with the new key so that I could use the shorter key until I saw that the new key had propagated).

Gilbert

On 7/15/2013 7:49 AM, [email protected] wrote:
Hello,

I have setup DKIM signing on my qmail system using these instructions:

http://wiki.qmailtoaster.com/index.php/How_to_Setup_DKIM_with_Qmail_Toaster

It seems to be working fine (all msgs are signed in the header). Yet, every time I send email to a gmail address, Google reports:

"dkim=neutral (bad format)"

I run my own DNS using powerdns, so i have total control over my dns records. What should I be looking at? My DNS records look like this for DKIM:

dkim1._domainkey.<my domain>.com

k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDG0GQHEGbLG0yEQvPamMxaC4uIBCC3LvMkI7JNXn7u6G4AnP2/8oCpCh1BP8JL0x4E1PGo0+3uVMahAAr1YYqVPFZSyAlS5cvfJBJv0NiZbAceLFF16Em3qP1T+Rfx/u5huqwLNMT1FEeA5w10A2K7Tl0A8zOnihH7Zx8ooWI0ewIDAQAB

Thanks everyone on the list for your continued support.

Fabian S.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]




---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to