Hello, the great team and the wonderful community,
I found
in /usr/local/share/doc/pkg-readmes/opensmtpd-filter-dkimsign
> To generate the public key ready for dns:
>
> openssl rsa -in /etc/mail/dkim/private.rsa.key -pubout | \
> sed '1s/.*/v=DKIM1;p=/;:nl;${s/-----.*//;q;};N;s/\n//g;b nl;'
should start with `doas -u _dkimsign ` as below:
```
To generate the public key ready for dns:
doas -u _dkimsign openssl rsa -in /etc/mail/dkim/private.rsa.key
-pubout | \
sed '1s/.*/v=DKIM1;p=/;:nl;${s/-----.*//;q;};N;s/\n//g;b nl;'
```
because only _dkimsign can read /etc/mail/dkim/ by default.
Thank you for your reading.
--
Kind regards,
@nabbisen
