1
2dknewkey(1) General Commands Manual dknewkey(1)
3
4
5
7 dknewkey - Generates new DKIM public/private key pairs
8
10 0.8.0
11
12
14 dknewykey generates new DKIM keys.
15
16 For RSA keys, it defaults to 2048 bit key size. This is controlled by
17 the BITS_REQUIRED variable. ed25519 keys do not have a variable size.
18
19 For RSA keys, it uses openssl to do the generation. By default it
20 assumes this is located at /usr/bin/openssl. This is controlled by the
21 OPENSSL_BINARY variable. For ed25519 keys, PyNaCl (python-nacl in
22 Debian and derivatives) is used. For RSA keys k=sha256 is now included
23 in the public DNS record to prevent inadvertent use with the now obso‐
24 lete sha1 hash algorithm (See RFC 8301).
25
26
28 dknewkey.py [-h] [--ktype {rsa,ed25519}] key_name
29
30 mandatory positional arguments:
31 key_name
32
33 optional arguments:
34 -h, --help show this help message and exit
35 --ktype {rsa,ed25519}
36 DKIM key type: Default is rsa
37
38 NOTE: Depending on the packaging and distribution, the exact path and
39 name for the executable may vary.
40
41
43 This version of dknewkey was written by Brandon Long
44 <blong@google.com>. It has been substantially rewritten by Scott Kit‐
45 terman <scott@kitterman.com>.
46
47 This man-page was created by Scott Kitterman <scott@kitterman.com> and
48 is licensed under the same terms as dkimpy.
49
50
51
52 2018-02-05 dknewkey(1)