SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag).
As the title says. One, out of the three DKIM CNAME records provided by the Easy DKIM setup agent does not resolve after 72 hours.
https://dmarcian.com/dkim-inspector/ tool to query. On the third CNAME
Name the query consistently returns an empty value, where it should resolve to the public key, aka 'p' tag.
As such, it appears that the SES Domain verification process has not completed, however it has not failed. It says in the dashboard, "Verification Pending" The domain is registered and administered via google domains. I've verified there are no misplaced characters, etc in my domains DNS config.
My initial assumption is that keys may be rotated, and thus at any given time one key may intentionally return a blank. However, I could not find documentation to support my theory. And it's been 4 days, and I'm getting the same result on this particular CNAME query.
Anyone have any ideas?
Thanks in advance!
Answering my own question.
The DKIM tag was a red herring. I wasn't able to figure out why the verification failed. But I reinitiated the process, and removed the CNAME records from the DNS on my domain. After re-entering all the details, the verification was done in under 30 minutes. I'm not certain what caused the first attempt to hang. But re-doing it solved the issue.
SES verification always failsasked 10 months ago
SPF and DKIM failure through Gmailasked 2 months ago
DKIM records properly resolved but emptyAccepted Answerasked 8 months ago
SES Domain verification: DKIM-Signature header returns empty key. Missing required Public key ("p" tag).Accepted Answerasked 3 months ago
DKIM signature invalid?asked 4 months ago
DKIM verification always unsuccessfullasked a year ago
DKIM signing DISABLED for multiple domainsasked 2 months ago
SES DKIM setting is empty, "Required tag not found"asked 3 months ago
DKIM Settings for Email AddressesAccepted Answerasked a year ago
About SES DKIM recordsasked 4 months ago