Skip to content

One of three DKIM CNAME records is invalid, lacking signtaure

0

I created and verified a domain identity for SES (schreibers.ca).

Using EasyDKIM, AWS created three CNAME records, and I imported them into my DNS provider (Cloudflare). The AWS console shows "DKIM configuration: Successful" indicating this was set up correctly.

However, one of the three records points to an Amazon DNS record that only shows p= instead of a valid signature:

$ dig -t CNAME olhccwxcnx42ghviz2d32sf3eja6z5md._domainkey.schreibers.ca +short
olhccwxcnx42ghviz2d32sf3eja6z5md.dkim.amazonses.com.
$ dig -t TXT olhccwxcnx42ghviz2d32sf3eja6z5md.dkim.amazonses.com +short
"p="

The other two records work as expected. One is:

$ dig -t CNAME zrm3kgm576ob6ebsy3fp5mivc5razy7x._domainkey.schreibers.ca +short
zrm3kgm576ob6ebsy3fp5mivc5razy7x.dkim.amazonses.com.
$ dig -t TXT zrm3kgm576ob6ebsy3fp5mivc5razy7x.dkim.amazonses.com +short
"p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCIn1nU8Synvvgi7qaFW9la384GkWWQjKOUEtT9J+0ynaZzpgq/cSzNsD8RzvMs3UnXlfbi/mOEvV1Bk6tCf2mvVzZzjqtI8oxzTo8Tc0LE/0+MPO1fEoAyZ9ABLv2x90QS+IiJ+isdaeErrA1xZrSDL3m9C/Z1HNgeiFBI9VYyuQIDAQAB"
1 Answer
0

I deleted and re-created the identity. Now one TXT record valid and the other two are blank, which … is better, I guess.

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.