DKIM - New Accounts Have Invalid DKIM

JamasWise

Member
Jun 18, 2014
12
1
53
cPanel Access Level
Root Administrator
Not sure when this stopped working but in the last few days I have noticed that new accounts created on our server have malformed DKIM records. We are using CloudFlare, so manually copy the DKIM record from cpanel into CloudFlare. When comparing new account records with existing accounts the new account DKIM record is way longer, almost double the number of characters. Also I notice that the string no longer ends with " but there is a " and space in the key at about the length of the old records. I have tested the records with a third party and they don't recognize it. Server is running 11.50.0.30. Anyone else seeing this.
 

Axel Rosenberg

Registered
Jul 29, 2016
2
0
1
Mexico
cPanel Access Level
Root Administrator
Not sure when this stopped working but in the last few days I have noticed that new accounts created on our server have malformed DKIM records. We are using CloudFlare, so manually copy the DKIM record from cpanel into CloudFlare. When comparing new account records with existing accounts the new account DKIM record is way longer, almost double the number of characters. Also I notice that the string no longer ends with " but there is a " and space in the key at about the length of the old records. I have tested the records with a third party and they don't recognize it. Server is running 11.50.0.30. Anyone else seeing this.
It seems to be a cPanel bug. It happened to me as well and after days of research I did the following and worked using an external DNS server:
1.- Open cPanel and go to "Email Authentication". Turn it OFF and then On again. That will create new key code.
2.- Copy the code and Find the a space and " at the middle of the code and delete those 2 characters.
3.- Copy the code with the deleted characters and validate it at http://dkimcore.org/tools/
4.- If you have a Master DNS on another server, paste de code validated at dkimcore.org

Not sure how to solve the issue if the same server is doing the job as your DNS server.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Not sure how to solve the issue if the same server is doing the job as your DNS server.
Could you verify if it's actually failing when sending email, or if it's only failing with those testing utilities?

Thank you.
 

Axel Rosenberg

Registered
Jul 29, 2016
2
0
1
Mexico
cPanel Access Level
Root Administrator
It seems to be a cPanel bug. It happened to me as well and after days of research I did the following and worked using an external DNS server:
1.- Open cPanel and go to "Email Authentication". Turn it OFF and then On again. That will create new key code.
2.- Copy the code and Find the a space and " at the middle of the code and delete those 2 characters.
3.- Copy the code with the deleted characters and validate it at DKIM Core Tools
4.- If you have a Master DNS on another server, paste de code validated at dkimcore.org

Not sure how to solve the issue if the same server is doing the job as your DNS server.
This does not solve the problem and the string cannot be deleted on cPANEL.
I´ve been trying to find a solution and there is nothing. I hope someone post a solution.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
This does not solve the problem and the string cannot be deleted on cPANEL.
I´ve been trying to find a solution and there is nothing. I hope someone post a solution.
You can manually edit a DNS zone via:

"WHM >> DNS Functions >> Edit DNS Zone"

However, could you verify if you are experiencing specific DKIM email delivery issues, or if you are referring to the warning output on a DKIM testing utility?

Thank you.