Re: Signing problems with OpenDKIM on Ubuntu

From: Scott Kitterman <>
Date: Sun, 21 Apr 2013 10:36:42 -0400

Jim Fenton <> wrote:

>On 04/20/2013 03:42 PM, Scott Kitterman wrote:
>> You might try adding:
>> AlwaysAddARHeader yes
>> The header might yield some useful information if added.
>> I'd also double check permissions on both
>/etc/mail/dkim/buttered.key.pem and
>> the directories above it. On Debian/Ubuntu, the milter runs as the
>> user and it needs to be able to read the key file.
>> Scott K
>I added AlwaysAddARHeader and it's adding neither an AR Header nor a
>signature still. Did double-check the permissions on the key file (as
>well as doing 'su opendkim' and made sure I could read it). Still
>Perhaps I need to move to the latest version of opendkim, but I read
>through the release notes of the intervening releases and didn't see
>anything that looked like it would affect this. I'd rather stick with
>the Ubuntu version because it gets auto-updated that way; I have a
>terrible track record getting around to doing manual upgrades!

I just thought of one more thing to check ...

Look in /etc/default/opendkim and see if the communication mechanism there (TCP socket, Unix socket) matches where Sendmail is looking to connect. It defaults to inet (TCP socket) and it occurs to me that Sendmail people seem inclined to assume a Unix socket.

Scott K
Received on Sun Apr 21 2013 - 14:36:55 PST

This archive was generated by hypermail 2.3.0 : Sun Apr 21 2013 - 14:45:02 PST