opendkim-testkey(8)

💅 opendkim-testkey(8) 💅

System Manager's Manual — okay bestie, this is the DKIM filter installation test, and it's giving “let’s check your keys before anything embarrassing happens” energy 🎀

🌸 NAME 🌸

opendkim-testkey — DKIM filter installation test.

✨ SYNOPSIS ✨

opendkim-testkey [-d domain] [-s selector] [-k keypath] [-v] [-x
       configfile]

🦋 DESCRIPTION 🦋

Okay so opendkim-testkey is the vibe check for your signing and verifying keys — private and public — when you’re setting them up for use with opendkim(8). It verifies the setup, no cap. ✨

This test program reads a domain name and selector from the command line, configuration file, or a key table, then queries and parses the resulting DKIM key(s), reporting any errors it finds. 💖

If you also hand it a key path, it reads the private key named there and tries to confirm that the private key specified by keypath (or in the key table) and the public DKIM key it retrieved actually match. That’s the matching fit check, bestie 🫶

💅 OPTIONS 💅

• -d domain — Names the domain where signing is to be done. More specifically, it names the domain where the public key matching the provided private key will be found. This parameter must be provided either explicitly, or in the configuration file, or via a KeyTable (see opendkim.conf(5) for details). 💖
• -k keypath — Specifies the path to the private key file which should be used for this test. This parameter is optional. 🔑
• -s selector — Names the selector within the specified domain whose public key should be retrieved and tested, comparing it to the private key if provided. This parameter must be provided either explicitly, or in the configuration file, or via a KeyTable (see opendkim.conf(5) for details). 🎀
• -v — Increases the amount of output (verbosity) of the program. May be specified multiple times for increased output. 🗣️
• -x conffile — Names a configuration file to be parsed. See the opendkim.conf(5) man page for details. The only values used are Domain, Selector, KeyFile, KeyTable, TrustAnchorFile and ResolverConfig. The default is /etc/opendkim/opendkim.conf. 📁

👑 NOTES 👑

⚠️ The test program will also complain if a private key file is readable by anyone other than the user executing the program. So yeah, if the perms are messy, it’s gonna call it out — keep it locked to the right user, bestie 💅

🌈 VERSION 🌈

This man page covers the version of opendkim-testkey that shipped with version 2.11.0 of OpenDKIM. 💖

🎀 COPYRIGHT 🎀

Copyright (c) 2007, 2008, Sendmail, Inc. and its suppliers. All rights reserved.

Copyright (c) 2009-2012, The Trusted Domain Project. All rights reserved.

🌟 SEE ALSO 🌟

• opendkim(8)
• RFC6376 - DomainKeys Identified Mail

---

💖 xoxo, The Trusted Domain Project — source of this opendkim-testkey(8) page — shipped with OpenDKIM 2.11.0, and the footer date is whatever your local man page renders, bestie 🎀