Re: [Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Dossy Shiobara via Assp-user
On 3/31/21 12:57 PM, Eric Germann wrote: [...] In /usr/local/assp/dkim/dkimconfig.txt I have the following for my domain [...] My public key is published in the DNS for .com .  I’ve verified it’s there by doing a "dig @nameserver dkim._domainkey..com

Re: [Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Eric Germann
Issue is fixed. It was a record formatting issue in BIND that clipped the record (before the one that only showed v=DKIM1) I route several domains thru this box. Is there any issue with using the same private key and published public key for each domain. Formatting the DNS record is a PITA.

Re: [Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Eric Germann
Fixed that now. I was working on wrapping in the DNS to get it to load. Eric > On Mar 31, 2021, at 3:11 PM, Dossy Shiobara wrote: > > > > On 3/31/21 12:57 PM, Eric Germann wrote: >> [...] >> In /usr/local/assp/dkim/dkimconfig.txt I have the following for my domain >> >> [...] >> >> My

Re: [Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Eric Germann
One added note/question. If I remove the dkim private key, my understanding is assp is to create them on startup. Two questions 1. Is this accurate and if it isn’t doing it, how does one force it? 2. If I run more than one domain thru ASSP and want them signed (defined in dkimconfig.txt),

[Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Eric Germann
Hello all, I’m pulling my hair out with DKIM in ASSP and not sure where else I can look. Inbound DKIM works fine. Mail validates and passes. Outbound mail is a different story. In /usr/local/assp/dkim/dkimconfig.txt I have the following for my domain Algorithm=rsa-sha1

Re: [Assp-user] ASSP and DKIM Signing

2021-03-31 Thread Dossy Shiobara via Assp-user
Eric, While there are probably some hints of "all your eggs in one [encryption key] basket" concerns, the underlying machinery does not prevent you from using the same key pair for signing emails for multiple domains. One piece of advice is to use CNAMEs to point your various domains at a