Skip to main content

Change default key length for DKIM

LoadFactor
The default cypher for cPanel's DKIM on my servers is k=rsa; which is a 512 bit key. Google is listing this as a DKIM fail with dkim=policy (weak key) Is there any way to change the default key length so that all generated keys are 2048?

Comments

10 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! That's odd to me as cPanel keys have been at least 1024 with the 2048 option since version 11.50:
    0
  • LoadFactor
    The DKIM.pm file was not altered. As it turns out, my sample was all on some very old accounts and the keys were ancient! Second question: is there a way to regenerate keys for all accounts in one go?
    0
  • akhand
    Hey there! That's odd to me as cPanel keys have been at least 1024 with the 2048 option since version 11.50:

    Hey Sir I want To Want How To Setup PTR In 2022 And Also I did not Find Edit Dns In New Update Help Me Plss Sir
    0
  • LoadFactor
    Hey Sir I want To Want How To Setup PTR In 2022 And Also I did not Find Edit Dns In New Update Help Me Plss Sir

    Your request is unrelated to this. Is it that hard to start your own thread?? PRT is managed by your hosting provider, not cPanel.
    0
  • akhand
    Your request is unrelated to this. Is it that hard to start your own thread?? PRT is managed by your hosting provider, not cPanel.

    i am the owner of server and also i did not to start Cpanel thread and also this problem come after Cpanel update
    0
  • quietFinn
    @akhand if you want to ask a question open a new thread instead of hijacking threads that have nothing to do with your question.
    0
  • LoadFactor
    i am the owner of server and also i did not to start Cpanel thread and also this problem come after Cpanel update

    The title of this thread is "Change default key length for DKIM" and has nothing to do with PTR, yet here you are, asking a PTR question. The way the forum is set up can be a little confusing. Create a new question by typing a title after the "new thread" button. Even if you own the server, the PTR is set by your provider. Most data centers have a place where you can do this, somewhere in the area where you list IP addresses. For example on OVH the screen looks like this:
    0
  • cPRex Jurassic Moderator
    @LoadFactor - I don't have an easy automated way to do that all at once. The closest thing I would have would be the API tools, which would let you remove all the keys and then add them:
    0
  • LoadFactor
    b) write a shell script ;)
    0
  • cPRex Jurassic Moderator
    Always an option!!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post