I figured it out at least on my host as to why one would get 'record not found'.

My mail host has entry in resolv.conf 'nameserver 127.0.0.1'

I have named config file for my domain to resolve to this mail host, 192.168.x.x

running

# opendkim-testkey -vvv -d whitehorsetc.com  -k /var/qmail/control/dkim/whitehorsetc.com.key -s dkim1

yields 'record not found'

when I change resolv.conf to external nameserver (8.8.8.8)

# opendkim-testkey -vvv -d whitehorsetc.com  -k /var/qmail/control/dkim/whitehorsetc.com.key -s dkim1

yields 'key OK'

You must add a TXT record to whichever DNS server your mail host is using.

On 1/21/2019 10:41 AM, Eric Broch wrote:

Maybe restart your named server.

On 1/21/2019 4:58 AM, Leonardo Porto wrote:

Looks like I was checking it the wrong way, the correct is:

# dig dkim1._domainkey.iwtelecom.com.br TXT
;; ANSWER SECTION:
dkim1._domainkey.iwtelecom.com.br. 86400 IN TXT "v=DKIM1\; k=rsa\; p=blabla...blabla"

Checking the key at https://dkimcore.org/tools/ looks fine also.

The opendkim-testkey still shows the error though.


Em 17/01/2019 18:30, Leonardo Porto escreveu:

Hi everyone,

I'm doing the DKIM step for a new server and when I test my DKIM signature I receive the error:

# opendkim-testkey -vvvv -d iwtelecom.com.br  -k /var/qmail/control/dkim/global.key -s dkim1
opendkim-testkey: using default configfile /etc/opendkim.conf
opendkim-testkey: /var/qmail/control/dkim/global.key: WARNING: unsafe permissions
opendkim-testkey: key loaded from /var/qmail/control/dkim/global.key
opendkim-testkey: checking key 'dkim1._domainkey.iwtelecom.com.br'
*opendkim-testkey: 'dkim1._domainkey.iwtelecom.com.br' record not found*

I created the record in the domain zone like bellow:

dkim1._domainkey IN      TXT     "v=DKIM1; k=rsa; p=bla...bla"

But it does not work when I try to resolve it:

dig dkim1._domainkey.iwtelecom.com.br

And it is not shown when I try:

dig +noall +answer iwtelecom.com.br any

Only the SPF record... I used the named-checkzone and everything looks fine, what am I doind wrong?


--
Eric Broch
White Horse Technical Consulting (WHTC)

--
Eric Broch
White Horse Technical Consulting (WHTC)

Reply via email to