The error: “DKIM: signing failed (RC -101)”

is the error code PDKIM_ERR_RSA_PRIVKEY (from src/pdkim/pdkim.h)

/* Function success / error codes */
#define PDKIM_OK 0
#define PDKIM_FAIL -1
#define PDKIM_ERR_OOM -100
#define PDKIM_ERR_RSA_PRIVKEY -101
#define PDKIM_ERR_RSA_SIGNING -102
#define PDKIM_ERR_LONG_LINE -103
#define PDKIM_ERR_BUFFER_TOO_SMALL -104

and is only returned in one place – in src/pdkim/pdkim.c

/* Perform private key operation */
if (rsa_parse_key(&rsa, (unsigned char *)sig->rsa_privkey,
strlen(sig->rsa_privkey), NULL, 0) != 0) {
return PDKIM_ERR_RSA_PRIVKEY;
}

So it looks like there is a problem parsing the RSA key that you generated for Exim.

This could be because the key generation failed, or because exim doesn’t have access to the file (file permissions).

I would start by trying to re-generate your certificates.

Mike

PDKIM >> Hashed body data, canonicalized >>>>>>>>>>>>>>>>>>>>>>>>>>>>>
d{CR}{LF}PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<> Hashed header data, canonicalized, in sequence >>>>>>>>>>>>>>
Date:{SP}Tue,{SP}01{SP}May{SP}2012{SP}12:55:11{SP}-0400{CR}{LF}
From:{SP}sysadmin@fromdomain.com{CR}{LF}
Message-Id:{SP}{CR}{LF}
PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<> Signed DKIM-Signature header, canonicalized >>>>>>>>>>>>>>>>>
DKIM-Signature:{SP}v=1;{SP}a=rsa-sha256;{SP}q=dns/txt;{SP}c=simple/simple;{SP}d=fromdomain.com;{SP}s=clips4sale.key._domainkey.fromdomain.com;{CR}{LF}{TB}h=Date:From:Message-Id;{SP}bh=b5BH63Qu/J1JXFMePN0RyHtCC1kT3uTiiTxs8JU5XRY=;{CR}{LF}{TB}b=;
PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
PDKIM [fromdomain.com] hh computed: 15525e51535f45caea0668d70b115c21e89beeada4f652aae48fb7beca8c9788
LOG: MAIN PANIC
DKIM: signing failed (RC -101)

Any help would be greatly appreciated. Thanks Mike.

Mike

Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc TCPwrappers OpenSSL Content_Scanning DKIM Old_Demime Experimental_SPF Experimental_SRS

Still getting signing failures
2012-04-30 12:46:08 1SOtjf-0007WF-EY DKIM: signing failed (RC -101)

Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa