summaryrefslogtreecommitdiffstats
path: root/certs
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2018-12-03 23:13:04 +0100
committerGuilhem Moulin <guilhem@fripost.org>2018-12-04 01:14:45 +0100
commitc21b92d9b79a80a27607618666b56fbc5cd26ac8 (patch)
tree264c8800eac3d6aeac734bbf43fdde40a16781ff /certs
parent50d5b3827eb9e342e499c053f330ac0bcfe424fa (diff)
Upgrade DKIM keys to rsa2048, and allow for multiple keys.
Diffstat (limited to 'certs')
-rw-r--r--certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub9
-rw-r--r--certs/dkim/9df9cdc7e101629b5003b587945afa70.pub9
-rw-r--r--certs/dkim/README11
3 files changed, 29 insertions, 0 deletions
diff --git a/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub b/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub
new file mode 100644
index 0000000..ef400f4
--- /dev/null
+++ b/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub
@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmCWIVZt+L/bJ5+abvdm
+Fm6Er/9g6e4WX2HKyeIfC5eDaPbUyHqHSY7xzWNiU+cbBvny8BASkdWsclLdoiuM
+J6Yes5VSzkH6j2gp9Uuy7d6p61Jbrizi7/CQzCZfhi5uGKiGtV2g+V/sIuXekm9Q
++Q2eqjj/6hUHGDPTTKEFlgruyaS6y+Kes+sJYjMG62lbTOKL5TjY6z0Gr2AMfglB
+Uj9QWD5jm+bH0clE1HZq51mxXQbV2v/7JEHjznR0nSB+jY2EV7g/MXM8DwJCDH4Z
+cknoH0NrcJRjuRt8ndufnx4Qh0t7qqWwmGF0jZOcZxHeODfkUlLxQ4SCMVeqV/SS
+TwIDAQAB
+-----END PUBLIC KEY-----
diff --git a/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub b/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub
new file mode 100644
index 0000000..2574f71
--- /dev/null
+++ b/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub
@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN6rMmDzZ0MtN6e+T3lS
+wny1qs0djjXJMJi5gfCXl9ZW4v5LT098EtpEQsDfY8NY3PvuBTD74Xsvy9jRh71/
+q0iZHHwOffQlP8BVi2uelO9brVBr9nHWvycbEp/PXMVPOSBRuXyrvIYPnWjmaPZc
+xT4L3OB5BtZPsGElxAzZMbTDzRr8K0yIY/HtVTXD5JJsKb3GIXiyHY7GCvV6tKeP
+eI2L0vJOJ2LLHHX962ykWHAfS12izkfBxGkMVn4AQZIPQ4iGwAPZ9z5DIsz11Riw
++3ysWWdmz2yV8HtoDKfOB4/vyFyWFlyaMkdvblDjgQv0m6bHwvXlxAGSWcZirmEM
+pQIDAQAB
+-----END PUBLIC KEY-----
diff --git a/certs/dkim/README b/certs/dkim/README
new file mode 100644
index 0000000..e5addf9
--- /dev/null
+++ b/certs/dkim/README
@@ -0,0 +1,11 @@
+To convert a PEM-encoded public key to a TXT record, run
+
+ $ SELECTOR="8f00fb94ec6c37aacb48bd43e073f9b7"
+ $ DOMAIN="fripost.org"
+ $ printf "%s._domainkey%s IN TXT (\n" "$SELECTOR" "${DOMAIN:+.$DOMAIN.}"; \
+ { printf "v=DKIM1; k=rsa; t=s; s=email; p=";
+ sed '/^--.*--$/d' <"./certs/dkim/$SELECTOR.pub" | tr -d '\n';
+ } | fold -w64 | sed 's/.*/ "&"/; $s/$/ )\n/'
+
+Remove the "t=s" tag if subdomaining or third-party signature (hosted
+domain) is required, cf. RFC 6376 sec. 3.6.1.