From c21b92d9b79a80a27607618666b56fbc5cd26ac8 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 3 Dec 2018 23:13:04 +0100 Subject: Upgrade DKIM keys to rsa2048, and allow for multiple keys. --- certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub | 9 +++++++++ certs/dkim/9df9cdc7e101629b5003b587945afa70.pub | 9 +++++++++ certs/dkim/README | 11 +++++++++++ 3 files changed, 29 insertions(+) create mode 100644 certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub create mode 100644 certs/dkim/9df9cdc7e101629b5003b587945afa70.pub create mode 100644 certs/dkim/README (limited to 'certs/dkim') diff --git a/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub b/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub new file mode 100644 index 0000000..ef400f4 --- /dev/null +++ b/certs/dkim/8f00fb94ec6c37aacb48bd43e073f9b7.pub @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmCWIVZt+L/bJ5+abvdm +Fm6Er/9g6e4WX2HKyeIfC5eDaPbUyHqHSY7xzWNiU+cbBvny8BASkdWsclLdoiuM +J6Yes5VSzkH6j2gp9Uuy7d6p61Jbrizi7/CQzCZfhi5uGKiGtV2g+V/sIuXekm9Q ++Q2eqjj/6hUHGDPTTKEFlgruyaS6y+Kes+sJYjMG62lbTOKL5TjY6z0Gr2AMfglB +Uj9QWD5jm+bH0clE1HZq51mxXQbV2v/7JEHjznR0nSB+jY2EV7g/MXM8DwJCDH4Z +cknoH0NrcJRjuRt8ndufnx4Qh0t7qqWwmGF0jZOcZxHeODfkUlLxQ4SCMVeqV/SS +TwIDAQAB +-----END PUBLIC KEY----- diff --git a/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub b/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub new file mode 100644 index 0000000..2574f71 --- /dev/null +++ b/certs/dkim/9df9cdc7e101629b5003b587945afa70.pub @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN6rMmDzZ0MtN6e+T3lS +wny1qs0djjXJMJi5gfCXl9ZW4v5LT098EtpEQsDfY8NY3PvuBTD74Xsvy9jRh71/ +q0iZHHwOffQlP8BVi2uelO9brVBr9nHWvycbEp/PXMVPOSBRuXyrvIYPnWjmaPZc +xT4L3OB5BtZPsGElxAzZMbTDzRr8K0yIY/HtVTXD5JJsKb3GIXiyHY7GCvV6tKeP +eI2L0vJOJ2LLHHX962ykWHAfS12izkfBxGkMVn4AQZIPQ4iGwAPZ9z5DIsz11Riw ++3ysWWdmz2yV8HtoDKfOB4/vyFyWFlyaMkdvblDjgQv0m6bHwvXlxAGSWcZirmEM +pQIDAQAB +-----END PUBLIC KEY----- diff --git a/certs/dkim/README b/certs/dkim/README new file mode 100644 index 0000000..e5addf9 --- /dev/null +++ b/certs/dkim/README @@ -0,0 +1,11 @@ +To convert a PEM-encoded public key to a TXT record, run + + $ SELECTOR="8f00fb94ec6c37aacb48bd43e073f9b7" + $ DOMAIN="fripost.org" + $ printf "%s._domainkey%s IN TXT (\n" "$SELECTOR" "${DOMAIN:+.$DOMAIN.}"; \ + { printf "v=DKIM1; k=rsa; t=s; s=email; p="; + sed '/^--.*--$/d' <"./certs/dkim/$SELECTOR.pub" | tr -d '\n'; + } | fold -w64 | sed 's/.*/ "&"/; $s/$/ )\n/' + +Remove the "t=s" tag if subdomaining or third-party signature (hosted +domain) is required, cf. RFC 6376 sec. 3.6.1. -- cgit v1.2.3