Export DKIM private keys

askuechler

Hi,
I need help setting the $SHOW_DKIM_PRIV_KEYS variable. I tried adding it to the mailcow.conf but the gui still does not get it. Anyone know the necessary steps to make this variable active and get access to the keys via gui?

Thanks in advance

askuechler

Ok, for anybody running into the same issue:
create ./mailcow-dockerized/data/web/inc/vars.local.inc.php

with the contents:
<?php
$SHOW_DKIM_PRIV_KEYS = true;
?>

RicHarvey

I’ve created this file and restarted everything, but still I don’t see in the UI where to export/show the private keys

accolon

System -> Configuration -> Options -> ARC/DKIM keys

Below each public key shown is a link named “Private key”.

RicHarvey

accolon Brilliant thank you! One last quest what format are these in because when i try and use the private key with Amazon SES it says it’s not a valid PEM key format.

accolon

RicHarvey

It looks like an RSA private key in PEM format and OpenSSL doesn’t complain (openssl rsa -in my_dkim.key -check). Sorry, no idea why SES won’t take it…

3dlabsio

I signed up for the site just to reply to this as google took me here and there was no fix.

The fix is to remove all line breaks from the key mailcow provides. It should one continuous line of text - one line only. I read this in the Amazon documentation here:

https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dkim-bring-your-own.html

“You have to delete the first and last lines (—–BEGIN PRIVATE KEY—– and —–END PRIVATE KEY—–, respectively) of the generated private key. Additionally, you have to remove the line breaks in the generated private key. The resulting value is a string of characters with no spaces or line breaks.”

Hope this helps someone else!