• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question DKIM: where is the public key stored?

onlinesolutions

Basic Pleskian
When enabling DKIM, there is a private key stored on your server and a public key that is stored in the DNS. I don´t have DNS installed in Plesk, so where would I find the information that needs to be set up as a DNS record?
 
As a text record you copy a part of the contents from the file /etc/opendkim/keys/yourdomain.com/mail.txt (or default.txt), it data should start from v=DKIM1; k=rsa; to the end, without the quotes as you can see it’s in quotes.

It'll look like this example:
Code:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPzE0GmvFwAQsgcFzopy4zMNWUbL6JM5XIyjBy3bUnANI5axeb/Lw/GBjUoSFLEiO80Tt8m3A5YrBKcodRQQURYiW6/YtElhLupHyfcxQhfNLU4z9JUOJKPjcpMZCj0Xv873QgVOl+7U605JdBHSPOx4ybBZwDq68cw9YFYRPmEwIDAQAB

You'll copy this code as a txt record to your DNS host.
 
Last edited:
As a text record you copy a part of the contents from the file /etc/opendkim/keys/yourdomain.com/mail.txt (or default.txt), it data should start from v=DKIM1; k=rsa; to the end, without the quotes as you can see it’s in quotes.

It'll look like this example:
Code:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPzE0GmvFwAQsgcFzopy4zMNWUbL6JM5XIyjBy3bUnANI5axeb/Lw/GBjUoSFLEiO80Tt8m3A5YrBKcodRQQURYiW6/YtElhLupHyfcxQhfNLU4z9JUOJKPjcpMZCj0Xv873QgVOl+7U605JdBHSPOx4ybBZwDq68cw9YFYRPmEwIDAQAB

You'll copy this code as a txt record to your DNS host.
Thank you for your response. It is not stored there, but I figured out I can generate the key byopenssl rsa -in default -pubout -out public as the private keys are in fact stored in etc/domainkeys/DOMAIN.com
 
Back
Top