-
Launch LISH console
-
Enter username and password
-
Enter the following commands to create. Replace domain
export DOMAIN=<change to domain>
mkdir /etc/opendkim/keys/${DOMAIN}
opendkim-genkey -b 2048 -d ${DOMAIN} -D /etc/opendkim/keys/${DOMAIN} -s default -v
openssl rsa -in /etc/opendkim/keys/${DOMAIN}/default.private -pubout > /etc/opendkim/keys/${DOMAIN}/default.public
- In a browser login to postfixadmin. Navigate to add Domain Keys
Description: ${DOMAIN} default key
Selector: default <-- CANNOT CHANGE
Domain: <Select domain from dropdown>
Private key: <Get from Step 5>
Public key: <Get from Step 6>
- Print private key. Copy the output
cat /etc/opendkim/keys/${DOMAIN}/default.private
-----BEGIN RSA PRIVATE KEY-----
MIIEow...
-----END RSA PRIVATE KEY-----
- Print public key. Copy the output
cat /etc/opendkim/keys/${DOMAIN}/default.public
-----BEGIN PUBLIC KEY-----
MIIB...
-----END PUBLIC KEY-----
-
Save changes
-
In browser click Add Sign Table Entry
-
Select domain key. Author should be the domain.
-
Navigate to https://cloud.linode.com/domains
-
Add a new TXT record
Hostname: default._domainkey
Value: <From step 12>
- Print txt record
cat /etc/opendkim/keys/${DOMAIN}/default.txt
default._domainkey IN TXT ( "v=DKIM1; k=rsa; "
"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo56F1I7fdly32vh3RCWL676HFhvFvAfaYuBsSQyZWMCKmivZGuhRjqjTlfe9JiVLeg5uZFOv4ci"
"sTwbj6Et8kMP3+vyh/5rDR9AIaJ7nI/L1rZN8XVJTNel+rghH5WseuvcVQX0DhABXqfngUDASf9kzcBCzMoMzpX7Ynw0eVqGcrzsplCBS+vKBNTeUMndefYxQCwM6gbmdYrleI2QIDAQAB" )
Remove the double quotes and make into a single line
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo56F1I7fdly32vh3RCWL676HFhvFvAfaYuBsSQyZWMCKmivZGuhRjqjTlfe9JiVLeg5uZFOv4cisW3wBt08EOD6oNuF5fFHRXwcSArNL5mxn5d6eIDmGuHyuCkuNtPefEtRV/d9d1AyB2VB9blzETTs84aauCM93jraI6b8T7ae7/jr7Zpqjp7WsZ/CTfqg/vs0byH3268EXNasTwbj6Et8kMP3+vyh/5rDR9AIaJ7nI/L1rZN8XVJTNel+rghH5WseuvcVQX0DhABXqfngUDASf9kzcBCzMoMzpX7Ynw0eVqGcrzsplCBS+vKBNTeUMndefYxQCwM6gbmdYrleI2QIDAQAB
- Click Save
-
Send an email from the domain to a Gmail account you own.
-
Go to Gmail on desktop browser. Click the three dots icon on the right side, select Show Original Message
-
Verify that SPF and DKIM checks pass
