dkim error

Discussion in 'General' started by Oitsuki, May 24, 2024.

  1. Oitsuki

    Oitsuki Member

    hello,
    Testing dkim, it does not work. I can receive email from github but google does not work for example because the dkim is not correct.

    Below my test on this website
    https://www.appmaildev.com/fr/dkim

    it seems the dkim identified and the dkim on the server are different.
    How to resolve that ?
    Thank you.
    Ispconfig configuration

    Code:
    Report-Id: 01b67147
    Sender: <[email protected]>
    Header-From: <[email protected]>
    HELO-Domain: vps.clicshopping.eu
    Source-IP: 91.134.91.2
    SSL/TLS: TLS secured
    Validator-Version: 1.19
    x-sender: [email protected]
    x-receiver: [email protected]
    Received: from vps.clicshopping.eu ([91.134.91.2]) by appmaildev.com over TLS secured channel with Microsoft SMTPSVC(8.5.9600.16384);
         Fri, 24 May 2024 12:27:58 +0000
    Received: from vps.clicshopping.eu (localhost [127.0.0.1])
        (Authenticated sender: [email protected])
        by vps.clicshopping.eu (Postfix) with ESMTPA id 0019B7E045
       for <[email protected]>; Fri, 24 May 2024 12:27:56 +0000 (UTC)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=clicshopping.org;
        s=default; t=1716553677;
        h=from:from:reply-to:subject:date:date:message-id:message-id:to:to:cc:
         mime-version:mime-version; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
        b=D8YGGnF+BDLFF/D4efVebcNkfxw/HfD+gHL5B/RL7HEWnfcC8V8hqsR6syi1EAmA2XR1le
        klXhyYcL2g+SQehyP/YW8ymI/w4INwExI/zIDOVnHwg+sG2/AF3TiFTKS+jjfIETmcDJ6H
        /gmWV0VOtExszU8opOTJAXFMMZnIUnDATrFHTzGcfZ93fkTpTUMlkBnniGQDEXNz2UAyHY
        92omxU6Msm4bTzMSeK+zAZsrvRMl7xeKBWFTcd92zwnsslhpdYwHtkLC/Onmnl1uClwJSL
        lM2DIssxisHVgmitvcd/dvFFul0C32txcMnzxOoBkfbHLyZu8JMxFZjy2HfJJA==
    MIME-Version: 1.0
    Date: Fri, 24 May 2024 14:27:56 +0200
    From: [email protected]
    To: [email protected]
    Message-ID: <[email protected]>
    X-Sender: [email protected]
    Return-Path: [email protected]
    X-OriginalArrivalTime: 24 May 2024 12:27:59.0407 (UTC) FILETIME=[D03BCBF0:01DAADD5]
    
    spf : pass
    Dkim : error
    Code:
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=clicshopping.org;
       s=default; t=1716553677;
       h=from:from:reply-to:subject:date:date:message-id:message-id:to:to:cc:
        mime-version:mime-version; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
       b=D8YGGnF+BDLFF/D4efVebcNkfxw/HfD+gHL5B/RL7HEWnfcC8V8hqsR6syi1EAmA2XR1le
       klXhyYcL2g+SQehyP/YW8ymI/w4INwExI/zIDOVnHwg+sG2/AF3TiFTKS+jjfIETmcDJ6H
       /gmWV0VOtExszU8opOTJAXFMMZnIUnDATrFHTzGcfZ93fkTpTUMlkBnniGQDEXNz2UAyHY
       92omxU6Msm4bTzMSeK+zAZsrvRMl7xeKBWFTcd92zwnsslhpdYwHtkLC/Onmnl1uClwJSL
       lM2DIssxisHVgmitvcd/dvFFul0C32txcMnzxOoBkfbHLyZu8JMxFZjy2HfJJA==
    Signed-by: [email protected]
    Expected-Body-Hash: 47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
    Current Utc timestamp: 2024-05-24T12:28:00.453; Signature timestamp: 2024-05-24T12:27:57.000
    Canonicalized header: from:[email protected]
    date:Fri, 24 May 2024 14:27:56 +0200
    message-id:<[email protected]>
    to:[email protected]
    mime-version:1.0
    DKIM-Result: permerror (no key)
    My screenshot
    upload_2024-5-24_14-36-31.png

    My dns screenshot
    upload_2024-5-24_14-37-40.png

    OVH dns configuration

    upload_2024-5-24_14-40-57.png
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    ISPConfig shows you the required DNS record, compare this to your OVH config. You will see that you use the wrong domain part at OVH and also the TXT part is not identical to what is shown in ISPConfig.
     
  3. Oitsuki

    Oitsuki Member

    thank you for this quick answer.
    You will see that you use the wrong domain ....
    No understand exactly

    The config on the domain is the same for ovh and ispconfig or I do not see something in particular
    Ispconfig dns :
    upload_2024-5-24_14-54-21.png


    laste element on ovh dns
    upload_2024-5-24_14-57-13.png
     

    Attached Files:

  4. pyte

    pyte Well-Known Member HowtoForge Supporter

    Click on the "Edit" button for the DKIM Record at OVH and double check that the "Cible" field is matching exactly the one in the ISPConfig Panel. Are you sure that the record at OVH is for the DKIM "default" selector?
     
  5. Oitsuki

    Oitsuki Member

    Ys it the same :
    ovh
    Code:
    v=DKIM1;t=s;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKlPtfdGXN2vG5XLZiLwsy7qoUBvIdwfhCfVmRURhrOkJHYQ2KaoILj9exDqsjNz9j+3PrhFRvnADXlsWGyEBE1qBP5PNmE3j0uNBd/OBawN5eUcqPddsdVqbMtHpdQ+yTWXVeWZR/0vTHw6nvVdgdYEQIo+xlMNuNNOGQd1YR//lJW4u5KOVd+K119KQMQZsPeFgfhI0trsxQNiDEt6xSa8GLEI/1vPF3xobcx+kWGm9TUDJhWVOFjFWm2eHNxBeBg3BCZL93eBQibO2LBOJ4m80KA5mlqNr14wc29RPStL7C5LnWGb/hN2d5O64PfRzmbVctf+wE6tj5y0LIvKbwIDAQAB;t=s;
    ispconfig
    [/CODE]
    v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKlPtfdGXN2vG5XLZiLwsy7qoUBvIdwfhCfVmRURhrOkJHYQ2KaoILj9exDqsjNz9j+3PrhFRvnADXlsWGyEBE1qBP5PNmE3j0uNBd/OBawN5eUcqPddsdVqbMtHpdQ+yTWXVeWZR/0vTHw6nvVdgdYEQIo+xlMNuNNOGQd1YR//lJW4u5KOVd+K119KQMQZsPeFgfhI0trsxQNiDEt6xSa8GLEI/1vPF3xobcx+kWGm9TUDJhWVOFjFWm2eHNxBeBg3BCZL93eBQibO2LBOJ4m80KA5mlqNr14wc29RPStL7C5LnWGb/hN2d5O64PfRzmbVctf+wE6tj5y0LIvKbwIDAQAB
    [/CODE]

    I have a double : t=s, modified and relaunch the ovh configuration ==> maybe is that ???

    Also if you look above we have this inside the check test. Must be the same as public key ? or it s something else.
    [/CODE]
    bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
    b=D8YGGnF+BDLFF/D4efVebcNkfxw/HfD+gHL5B/RL7HEWnfcC8V8hqsR6syi1EAmA2XR1le
    klXhyYcL2g+SQehyP/YW8ymI/w4INwExI/zIDOVnHwg+sG2/AF3TiFTKS+jjfIETmcDJ6H
    /gmWV0VOtExszU8opOTJAXFMMZnIUnDATrFHTzGcfZ93fkTpTUMlkBnniGQDEXNz2UAyHY
    92omxU6Msm4bTzMSeK+zAZsrvRMl7xeKBWFTcd92zwnsslhpdYwHtkLC/Onmnl1uClwJSL
    lM2DIssxisHVgmitvcd/dvFFul0C32txcMnzxOoBkfbHLyZu8JMxFZjy2HfJJA==
    [/CODE]
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    No, it's not. See my post #2:

    ISPConfig: default._domainkey.clicshopping.org.
    OVH: clicshopping.org.

    you created the DNS record for a completely different subdomain.
     
  7. Oitsuki

    Oitsuki Member

    @till ,
    Thank you now the test pass.
     

Share This Page