Weak DKIM Keys

[timvie]

I upgraded from 11.32 to 11.34 now I am getting a dkim=policy (weak key) from gmail. I have seen to disable the DKIM and then delete the public and private DKIM keys and the re-enable DKIM and it will generate the new larger DKIM key.

Do I delete the keys via ssh?

Can someone give me the code to do this please?



Thanks in advance,


Tim

 

[Greenhost]

Hi Tim,
Yes, you should, for deleting DKIM on SSH:

 /opt/zimbra/libexec/zmdkimkeyutil -r -d example.com

For rebuild :

/opt/zimbra/libexec/zmdkimkeyutil -a -d example.com

Note: This is fore zimbra, what's your email and calendar groupware software?:p

 

[mykkal]

Wish there was some kind of notification when doing this... I wouldn't have known except I happen to make changes to my SPF records and noticed a hard fail.

 

[mykkal]

I was able to fix the weak keys issue by disabling DKIM, deleting the keys manually, and enabling dkim. make sure you restart exim afterwards.

cpanel will create 1024 bit keys if you do this.