Your DKIM signature is not valid?

Why I am getting this error testing with mail-tester.com

I have Dkim value from cPanel

I removed quotes "" around the value and submitted to Cloudflare with a TXT record with name default._domainkey

in cPanel, it is verified

DKIM is a means of verifying incoming email. It ensures that incoming messages are unmodified and are from the sender from whom they claim to be. This feature works to prevent incoming spam messages.

Status: Enabled Active (DNS Check Passed)

But mail-tester.com is saying: Your DKIM signature is not valid

How to correct this?

How long ago did you add it to CloudFlare?

How long ago did you add it to CloudFlare?
Your DKIM is this:
Change it to this:
The key is broken down into multiple parts remove the " in the middle and join the string together and then add the " to the end

Also read this article: https://support.cloudflare.com/hc/en-us/articles/200168696-How-do-I-add-DKIM-records-

Localnode said:

How long ago did you add it to CloudFlare?

Click to expand...

Localnode said:

How long ago did you add it to CloudFlare?
Your DKIM is this:

Code:

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYui3rfkZK6YxH2A2U0ePd8PnmWMeiZvhRSxN3sSvIq00Yz14JSrWLEW7kCPCd/rLnME4rqLetxjke46ejtu5FqhzV29QTOnDnCdnu7nBIi7S1e0EDQCbDWShPZfRDLSwDUv+jMVDp9G5yM93M70Xl6uvbbpFOIVdTQ8bIsETLOqPuad8pvIJMdcnrkD+ZQ53" VWjhIrmJEEWGCGhZgPIxtkDYc+0qKN9vnt8kyWaI58VcYJ3I+Ow+t2lzQGo1qcncHPef0yBFgLf5yNcd9tVUroIoLoseqzD9WR7bYtfIlPXeJgwa+eszD4XH1nkZA4BdJUhcB+CPWfj1uxm3Sa0ZQIDAQAB\";

Click to expand...

I got DKIM value from cPanel.

After added on Cloudflare, my DKIM gets verified in cPanel but the problem is mail-tester.com is still saying that DKIM is not valid.
I don't know how to verify right for mail-tester.com

Localnode said:

Change it to this:

Code:

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYui3rfkZK6YxH2A2U0ePd8PnmWMeiZvhRSxN3sSvIq00Yz14JSrWLEW7kCPCd/rLnME4rqLetxjke46ejtu5FqhzV29QTOnDnCdnu7nBIi7S1e0EDQCbDWShPZfRDLSwDUv+jMVDp9G5yM93M70Xl6uvbbpFOIVdTQ8bIsETLOqPuad8pvIJMdcnrkD+ZQ53VWjhIrmJEEWGCGhZgPIxtkDYc+0qKN9vnt8kyWaI58VcYJ3I+Ow+t2lzQGo1qcncHPef0yBFgLf5yNcd9tVUroIoLoseqzD9WR7bYtfIlPXeJgwa+eszD4XH1nkZA4BdJUhcB+CPWfj1uxm3Sa0ZQIDAQAB\";

The key is broken down into multiple parts remove the " in the middle and join the string together and then add the " to the end

Also read this article: https://support.cloudflare.com/hc/en-us/articles/200168696-How-do-I-add-DKIM-records-

Click to expand...

I already have read this post

As they said

default._domainkey.example.com. 299 IN TXT "v=DKIM1; k=rsa; p=<encoded public key>" "<rest of public key>;"

You should remove the quotation marks and the spaces between them when adding DKIM records to your zone.

You do not need to escape semicolons for your DKIM records on Cloudflare.

If you still encounter issues copy-pasting the DKIM record values, you could also try importing a zone file and then remove " and \

Click to expand...

So I removed quotes at the first and end of the line. and removed ;

Why you're still putting quotes in your suggestion?

"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYui3rfkZK6YxH2A2U0ePd8PnmWMeiZvhRSxN3sSvIq00Yz14JSrWLEW7kCPCd/rLnME4rqLetxjke46ejtu5FqhzV29QTOnDnCdnu7nBIi7S1e0EDQCbDWShPZfRDLSwDUv+jMVDp9G5yM93M70Xl6uvbbpFOIVdTQ8bIsETLOqPuad8pvIJMdcnrkD+ZQ53VWjhIrmJEEWGCGhZgPIxtkDYc+0qKN9vnt8kyWaI58VcYJ3I+Ow+t2lzQGo1qcncHPef0yBFgLf5yNcd9tVUroIoLoseqzD9WR7bYtfIlPXeJgwa+eszD4XH1nkZA4BdJUhcB+CPWfj1uxm3Sa0ZQIDAQAB";

Click to expand...

Because that's the way to add it. I just removed the quotation mark in the middle.
If it doesn't work, remove quote at start and end, and semicolon. It will work the way I added, though. Because that's what I did (removed quote in middle), and it works.

Sorry I could fix a half of this problem as my emails were sent to inbox box of Gmail although Your DKIM signature is not valid is still being alerted when checking with mail-tester.com

Some days ago when sending emails to @gmail.com my email went to spam box there but now it is sent to inbox box.

I tried a searching on Google and found these ways and see they are effective to fix the problem.

In cPanel >> Authentication

enable DKIM and SPF by adding proper value on Cloudflare.

Don't get DKIM value in this area to add to cloudflare, using this way.

In SSH, type

get DKIM value by typing this command


Change yourdomainame.com with your real domain name.



Removing line brake in DKIM value and adding it to this


Change PublicDomainKeyGoesHere with the valued you copied between BEGIN PUBLIC KEY and END PUBLIC KEY

Adding it to Cloudflare like this



All done.

If someone knows how to fix and validate DKIM when checking with mail-tester, please share below.


Thanks
David.

Still no luck. Copied the settings from SiteGround and applied them Cloudflare. It still says that DKIM signature is not valid.

I solved this problem. Since I am no expert by any means, and it seems the experts have a very poor way of describing solutions, I do a lot of trial and error. I won't take you through the last week of my life trying to solve this. Even the tech support at Atlantic did not have a clue how to manage or set up mail authentication in cpanel on their own servers. I did everything you did above with no luck on mail-tester.com. Until...here it comes...on my cloudflare DNS account I deleted the last semicolon and quotation mark and voila...an 8.8 score on mail-tester.com So your dkim record should look like this when you paste it into the cloudflare field:

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYui3rfkZK6YxH2A2U0ePd8PnmWMeiZvhRSxN3sSvIq00Yz14JSrWLEW7kCPCd/rLnME4rqLetxjke46ejtu5FqhzV29QTOnDnCdnu7nBIi7S1e0EDQCbDWShPZfRDLSwDUv+jMVDp9G5yM93M70Xl6uvbbpFOIVdTQ8bIsETLOqPuad8pvIJMdcnrkD+ZQ53VWjhIrmJEEWGCGhZgPIxtkDYc+0qKN9vnt8kyWaI58VcYJ3I+Ow+t2lzQGo1qcncHPef0yBFgLf5yNcd9tVUroIoLoseqzD9WR7bYtfIlPXeJgwa+eszD4XH1nkZA4BdJUhcB+CPWfj1uxm3Sa0ZQIDAQAB

In my cpanel record mine ended with \; I deleted the semicolon and the trailing slash in order to get it to work.

Also for those of you who use cloudflare or another third party DNS and you see the message "unable to verify that this server is an authoritative nameserver" in your cpanel Authentication section in the Email section, just ignore it. Copy the DKIM public key you see in that field, delete the quoatation and space separator in the middle of the key making one long code and delete the last quotation and semicolon. It should look similar to the one above. Paste that into your third party DNS and you will have a valid DKIM key. DO NOT go to other services like DKIMCore.org to generate your key as I did originally. The key generated there will certainly give you a valid key but the problem lies with your cpanel then because the private key on your cpanel accounts are different so they won't match up with the new public key you generate. And now mail-tester will congratulate you on having a great email setup. My 2 cents...

Flyingscot said:

I solved this problem. Since I am no expert by any means, and it seems the experts have a very poor way of describing solutions, I do a lot of trial and error. I won't take you through the last week of my life trying to solve this. Even the tech support at Atlantic did not have a clue how to manage or set up mail authentication in cpanel on their own servers. I did everything you did above with no luck on mail-tester.com. Until...here it comes...on my cloudflare DNS account I deleted the last semicolon and quotation mark and voila...an 8.8 score on mail-tester.com So your dkim record should look like this when you paste it into the cloudflare field:

Click to expand...

yes I also did everything to verify for mail-test but not luck like you, I think it was the problem of mail-tester.com
Are you sure after you verify DKIM with mail-tester.com then your DKIM will be verified successfully with other mail checking tools?

Flyingscot said:

In my cpanel record mine ended with \; I deleted the semicolon and the trailing slash in order to get it to work.

Click to expand...

I didn't find any guide that allow use to remove \; or if that is jut to make it work with mail-tester then I think it can be a wrong way.

Here are my results. Please take a look if you have few minutes to spare. Any and all help is appreciated.
https://www.mail-tester.com/web-2qzzk

Tried that already per instructions above. No luck..

I have copied the key from cpanel of fastruckmoving.com on siteground.

It is the key that Siteground re-generated after I re-enabled DKIM in Siteground.