RE: dkim-milter verify, but don't sign.
> -----Original Message-----Both dkim-filter (which is now obsolete, and 2.7.2 wasn't the most recent release anyway) and opendkim have tools to debug these problems, especially if you are both the signer and the verifier as you are in this case.
> From: owner-postfix-users@... [mailto:owner-postfix-users@...] On Behalf Of Josef Karliak
> Sent: Monday, November 07, 2011 3:50 AM
> To: Robert Schetterer
> Cc: postfix-users@...
> Subject: Re: dkim-milter verify, but don't sign.
> thanks for tips, I used "-i ilist file containing list of
> internal (signing) hosts".
> It is signing now, but signature fails on the verifier :
> Nov 7 12:40:54 celer dkim-filter: 5CCC8C750A SSL
> error:04077068:rsa routines:RSA_verify:bad signature Nov 7 12:40:54
> celer dkim-filter: 5CCC8C750A: bad signature data
But this isn't a postfix problem. I suggest upgrading to opendkim and then posting your question on the opendkim-users list.