• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Question DKIM: where is the public key stored?

onlinesolutions

Basic Pleskian
When enabling DKIM, there is a private key stored on your server and a public key that is stored in the DNS. I don´t have DNS installed in Plesk, so where would I find the information that needs to be set up as a DNS record?
 
As a text record you copy a part of the contents from the file /etc/opendkim/keys/yourdomain.com/mail.txt (or default.txt), it data should start from v=DKIM1; k=rsa; to the end, without the quotes as you can see it’s in quotes.

It'll look like this example:
Code:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPzE0GmvFwAQsgcFzopy4zMNWUbL6JM5XIyjBy3bUnANI5axeb/Lw/GBjUoSFLEiO80Tt8m3A5YrBKcodRQQURYiW6/YtElhLupHyfcxQhfNLU4z9JUOJKPjcpMZCj0Xv873QgVOl+7U605JdBHSPOx4ybBZwDq68cw9YFYRPmEwIDAQAB

You'll copy this code as a txt record to your DNS host.
 
Last edited:
As a text record you copy a part of the contents from the file /etc/opendkim/keys/yourdomain.com/mail.txt (or default.txt), it data should start from v=DKIM1; k=rsa; to the end, without the quotes as you can see it’s in quotes.

It'll look like this example:
Code:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPzE0GmvFwAQsgcFzopy4zMNWUbL6JM5XIyjBy3bUnANI5axeb/Lw/GBjUoSFLEiO80Tt8m3A5YrBKcodRQQURYiW6/YtElhLupHyfcxQhfNLU4z9JUOJKPjcpMZCj0Xv873QgVOl+7U605JdBHSPOx4ybBZwDq68cw9YFYRPmEwIDAQAB

You'll copy this code as a txt record to your DNS host.
Thank you for your response. It is not stored there, but I figured out I can generate the key byopenssl rsa -in default -pubout -out public as the private keys are in fact stored in etc/domainkeys/DOMAIN.com
 
Back
Top