[SOLVED] The official way to generate DKIM 1024. Is there a solution?

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Toru
Posts: 7
Joined: Mon Jan 15, 2018 12:44 pm

[SOLVED] The official way to generate DKIM 1024. Is there a solution?

Postby Toru » Thu Feb 01, 2018 10:25 am

Zimbra 8.7.11 by default generates DKIM 2048. The generated key is very long. So it turns out that some hosting providers can not resolve a long (more than 255 letters) TXT record as specified in rfc4408 https://tools.ietf.org/html/rfc4408#section-3.1.3 (for example my provider mittwald.de). So I'm forced to use a shorter key.

Here at the forum experts say (viewtopic.php?f=15&t=60548&p=277140&hilit=DKIM#p276919) that the editing script file zmdkimkeyutil is not the best idea.

Is there an official way to generate a 1024 bit key?


User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2777
Joined: Thu May 22, 2014 4:47 pm

Re: The official way to generate DKIM 1024. Is there a solution?

Postby jorgedlcruz » Thu Feb 01, 2018 10:35 am

Hello,
I'm sure your provider does support 2048-bit, just contact them and send them the next:

If not, you are correct, by editing the script itself and generating 1024, which aren't very secure anymore.

Best regards
Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
Toru
Posts: 7
Joined: Mon Jan 15, 2018 12:44 pm

Re: The official way to generate DKIM 1024. Is there a solution?

Postby Toru » Thu Feb 01, 2018 11:08 am

Unfortunately, no, they can not. Below is their response:

"Our DNS servers can currently handle a maximum of 256 characters.
Unfortunately we can not add longer entries manually."

Ok, thank's for response! So then I'll edit zmdkimkeyutil.

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot] and 11 guests