cPanel not signing email with DKIM when using Cloudflare for DNS hosting

fabienlege

Registered
Jun 30, 2020
2
0
1
France
cPanel Access Level
Website Owner
Hi,

My hoster provide me a cpanel access to mange my emails account. but for website performance reason, I use cloudflare for managing my domain DNS.

Everithing work great exept dkim signature !
- I've activated dkik in email > authentication
- I've copied DKIM txt record from cpanel to cloudflare
- i've tested my DKIM recork with Check a DKIM Core Key => success
- i've sending an email to DKIM Test - DKIM vérifier - DKIM validateur to check dmkim => FAIL ! no dkmi signature !

I've read every post about dkim+cloudflare on this forum, nothing help me to resolve the problem !

Has anyone successfully made DKIM work with Cloudflare?
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
CloudFlare has a number of articles on this: How can i add dkim and how to get it?!
 

fabienlege

Registered
Jun 30, 2020
2
0
1
France
cPanel Access Level
Website Owner
Hi Lauren,

Thank you for your reply

Like I've said higter : no problem to find DKIM txt record in cPanel and integrate it in cloudflare.
dkimcore keycheck say me my dns are correct.

my problem is : my outgoing email are not signed by server.
result when I send mail to appmaildev.com :
DKIM-Result: none (no signature)
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
Yes I understood your issue but if the DKIM key is not added properly with CloudFlare it won't be signed, for example when you look at dkimcore that performs a DNS lookup of the record. This means that the TXT record is not able to be resolved which is why I sent you the articles that will resolve your issue.
 

QAZwsxED

Member
Oct 4, 2020
9
0
1
Australia
cPanel Access Level
Website Owner
I recently solved a similar issue.
Solution: manually add a Message-Id (note not a Message-ID) header then connect and send an email.
cPanel WHM adds a Message-ID header and re-arranges the 'h' record in the DKIM signature which invalidates it, causing a DKIM:fail in the recipients mailbox.