On 2/1/2017 6:40 PM, Andrew C Aitchison wrote:
> On Wed, 1 Feb 2017, Michael J. Tubby B.Sc. MIET wrote:
>
>> Mike,
>>
>> I do it like this:
>
>> Place the keys for each domain in:
>>
>> /etc/exim/dkim/<domain-name>-public.key
>> /etc/exim/dkim/<domain-name>-private.key
>>
>> Example:
>>
>> mike@public:/etc/exim/dkim$ ls -l
>> total 16
>> -rw-r--r-- 1 root root 1675 Feb 24 2016 grendel.co.uk-private.key
>> -rw-r--r-- 1 root root 451 Feb 24 2016 grendel.co.uk-public.key
>> -rw-r--r-- 1 root root 1675 Feb 24 2016 tubby.org-private.key
>> -rw-r--r-- 1 root root 451 Feb 24 2016 tubby.org-public.key
>
> Do you need to make the private keys world readable,
> or can they be limited to some group ?
I could probably change the permissions to 'root:debian-exim' and mode
to 640 ;-)
Mike
