By using AWS re:Post, you agree to the Terms of Use
/SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag)./

SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag).

0

As the title says. One, out of the three DKIM CNAME records provided by the Easy DKIM setup agent does not resolve after 72 hours.
I'm utilizing https://dmarcian.com/dkim-inspector/ tool to query. On the third CNAME Name the query consistently returns an empty value, where it should resolve to the public key, aka 'p' tag. As such, it appears that the SES Domain verification process has not completed, however it has not failed. It says in the dashboard, "Verification Pending" The domain is registered and administered via google domains. I've verified there are no misplaced characters, etc in my domains DNS config. My initial assumption is that keys may be rotated, and thus at any given time one key may intentionally return a blank. However, I could not find documentation to support my theory. And it's been 4 days, and I'm getting the same result on this particular CNAME query.
Anyone have any ideas?

Thanks in advance!

1 Answers
0
Accepted Answer

Answering my own question.
The DKIM tag was a red herring. I wasn't able to figure out why the verification failed. But I reinitiated the process, and removed the CNAME records from the DNS on my domain. After re-entering all the details, the verification was done in under 30 minutes. I'm not certain what caused the first attempt to hang. But re-doing it solved the issue.

answered 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions