On 6/3/2023 at 7:23 PM, Sandeep B. said:

// zone domain.tld
zone "domain.tld" {type master; file "/var/named/domain.tld.db.signed";};
// zone_end domain.tld

I've a question about this step. After doing this there is a problem on CWP -> DKIM Manager where the zone appears duplicated and the signed one is not recognized.

How can it be solved for CWP? What are the additional steps to get it working?

DNSSEC is nothing to do with DKIM double records, to solve the issue you need to delete the keys from /etc/opendkim for that domains and from the dns manager and then regenerate the key 

or edit /etc/opendkim.conf

and add this lines at last :

RemoveOldSignatures  yes

and restart dkim service

1 hour ago, Sandeep B. said:

DNSSEC is nothing to do with DKIM double records, to solve the issue you need to delete the keys from /etc/opendkim for that domains and from the dns manager and then regenerate the key 

or edit /etc/opendkim.conf

and add this lines at last :

RemoveOldSignatures  yes

and restart dkim service

This doesn't solve the issue. Into the DKIM manager there is a line with domain.tld with all the green dots, and under that line there is another one with domain.tld.db.sig with all dots in red.

I've added the "RemoveOldSignatures  yes" into opendkim.conf then restarted opendkim service but in CWP there is already the issue.

 

Check with https://www.mail-tester.com/ and check what is the exact issue