DKIM key load permission error

[lucagasparini]

In Mail module, the DKIM key is not included in the email header when a message is sent.

Steps to reproduce

• Install NethServer 8 from scratch.
• Install the mail module.
• Enable DKIM on the mail server.
• Send an email and check the email headers for the DKIM signature.

Expected behavior

The DKIM key should be included in the email header.

Actual behavior

DKIM headers are missing. The following error is found in the logs:

[1:mail1:rspamd] (normal) <47d1b8>; task; dkim_module_load_key_format: cannot load dkim key /var/lib/rspamd/dkim/default.key: cannot map key file: '/var/lib/rspamd/dkim/default.key' Permission denied

The file permissions are as follows:

mail:/# ls -l /var/lib/rspamd/dkim/
total 8
-rw-------    1 root     rspamd        1675 Jun 26 15:01 default.key
-rw-r--r--    1 root     rspamd         454 Jun 26 15:01 default.txt

Components

ns8-mail 1.4.3

Acknowledgements

I resolved the issue with the following commands:

runagent -m mail1 podman exec -ti rspamd ash -l
chmod g+r /var/lib/rspamd/dkim/default.key

[DavidePrincipi]

As alternative, check if the file owner be changed from root to rspamd without altering the permissions.