Package: opendkim-tools Version: 2.11.0~alpha-12 Severity: normal The man page for opendkim-genkey has the following option listed:
-r (--restricted) Restricts the key for use in e-mail signing only. The default is to allow the key to be used for any service. However, using the long form of this argument results in the following output: # opendkim-genkey --restricted Unknown option: restricted opendkim-genkey: usage: opendkim-genkey [options] --append-domain include domain name in zone file stub --bits=n use n bits to generate the key --directory=path leave output in the named directory --domain=name generate data for the named domain [localhost] --hash-algorithms=list limit to use of the named algorithm(s) --help print help and exit --note=string include specified note in zone data --restrict restrict key to email use only --selector=name selector name [default] --subdomains allow signing of subdomains --testmode indicate key is in test mode --verbose increased output --version print version and exit As suggested in the output, the correct long form is --restrict, and that does work: # opendkim-genkey --restrict -v opendkim-genkey: generating private key opendkim-genkey: private key written to default.private opendkim-genkey: extracting public key opendkim-genkey: DNS TXT record written to default.txt The short form also works: # opendkim-genkey -r -v opendkim-genkey: generating private key opendkim-genkey: private key written to default.private opendkim-genkey: extracting public key opendkim-genkey: DNS TXT record written to default.txt So the problem is simply a typo in the man page, and the fix would be to replace --restricted with --restrict. -- System Information: Debian Release: 10.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-9-amd64 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages opendkim-tools depends on: ii libbsd0 0.9.1-2 ii libc6 2.28-10 ii libdb5.3 5.3.28+dfsg1-0.5 ii libldap-2.4-2 2.4.47+dfsg-3+deb10u2 ii liblua5.1-0 5.1.5-8.1+b2 ii libmemcached11 1.0.18-4.2 ii libmemcachedutil2 1.0.18-4.2 ii libopendbx1 1.4.6-13+b1 ii libopendkim11 2.11.0~alpha-12 ii librbl1 2.11.0~alpha-12 ii libssl1.1 1.1.1d-0+deb10u3 ii libunbound8 1.9.0-2+deb10u1 ii libvbr2 2.11.0~alpha-12 opendkim-tools recommends no packages. opendkim-tools suggests no packages. -- no debconf information