SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag).

Question

As the title says.  One, out of the three DKIM CNAME records provided by the Easy DKIM setup agent does not resolve after 72 hours.  
I'm utilizing `https://dmarcian.com/dkim-inspector/` tool to query.  On the third CNAME `Name` the query consistently returns an empty value, where it should resolve to the public key,  aka 'p' tag. 
As such, it appears that the SES Domain verification process has not completed, however it has not failed.  It says in the dashboard, "Verification Pending" The domain is registered and administered via google domains.  I've verified there are no misplaced characters, etc in my domains DNS config.
My initial assumption is that keys may be rotated, and thus at any given time one key may intentionally return a blank. However, I could not find documentation to support my theory.   And it's been 4 days, and I'm getting the same result on this particular CNAME query.   
Anyone have any ideas?

Thanks in advance!

jnilsson · Accepted Answer

Answering my own question.  
The DKIM tag was a red herring.  I wasn't able to figure out why the verification failed.  But I reinitiated the process, and removed the CNAME records from the DNS on my domain.  After re-entering all the details, the verification was done in under 30 minutes.  I'm not certain what caused the first attempt to hang.  But re-doing it solved the issue.

SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag).

Contenuto pertinente