DKIM is change automatically by cloudflare Google Workplace

What is the name of the domain?

What is the error number?

It adds unnecessary code to DKIM Google Workplace It adds " " for no reason. Is that why Google Workplace can’t verify? I added " manually but it created the same problem I checked with some tools and it verify fine but Google Workplace can’t verify DKIM for over 30 hours

What is the error message?

It adds unnecessary code to DKIM Google Workplace It adds " " for no reason. Is that why Google Workplace can’t verify? I added " manually but it created the same problem I checked with some tools and it verify fine but Google Workplace can’t verify DKIM for over 30 hours

What is the issue you’re encountering

It adds unnecessary code to DKIM Google Workplace It adds " " for no reason. Is that why Google Workplace can’t verify? I added " manually but it created the same problem I checked with some tools and it verify fine but Google Workplace can’t verify DKIM for over 30 hours

What steps have you taken to resolve the issue?

It adds unnecessary code to DKIM Google Workplace It adds " " for no reason. Is that why Google Workplace can’t verify? I added " manually but it created the same problem
I checked with some tools and it verify fine but Google Workplace can’t verify DKIM for over 30 hours

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

It adds unnecessary code to DKIM Google Workplace It adds " " for no reason. Is that why Google Workplace can’t verify? I added " manually but it created the same problem
I checked with some tools and it verify fine but Google Workplace can’t verify DKIM for over 30 hours

Screenshot of the error

DNS Records lukaboltes.com Account Cloudflare.png

This is expected. TXT record strings are limited to 255 characters and if longer than that, broken up into multiple strings. This is handled automatically by Cloudflare.

If unsure why the record can’t be validated by Google can you give the domain name and DKIM selector - the forum software follows the redirect in the link you posted above so post the domain name inside back ticks using the </> button.

Domain is lukaboltes.com
Should I switch back to Dynadot DNS ? in the middle of the process before DKIM i changed to cloudflare because in Dynadot there is no place in TXT for host like google._domainkey
No middle entry field. Mabe because I am using redirect to linktr.ee?

Assuming the selector is google, your DKIM record resolves OK…
https://cf.sjr.dev/tools/check?e2c9f27b68af4239b9dde57e6854bc0b#dns-mail

The quotation marks are required by the DNS standards although some DNS providers may or may not show them to you. Cloudflare does show them. If Google doesn’t verify the DNS record, then you’ll need to contact Google.

Hi should I enable DNSSEC ? How to generate key?
If I write without middle entry field in Dnynadot i t will be OK ?
There is no entry field for google._domainkey
Is there any other free DNS or paid?
I don’t currently have any hosting

No it devide DKIM in half it add “” in the middle of key 2" "g6
I even see it now in your tool but all other tools it show normal
Please check imgur photos

I just wanted to pick GoDadd or Google Domain so I won’t have any complications
Here I got lol :slight_smile: I thought Dynadot have better DNS

Even domain reseller like Reseller Club have better with old control panel
Any way to use this? or only works if I purchased domain there?

No, it’s not related and will just confuse you.

As I explained, that is normal and is required by DNS standards. If tools shows you the DNS record without quotes, or without quotes in the middle, then they are just formatting it nicely for readability, but the underlying DNS record will have the quotes in.

dig +short google._domainkey.lukaboltes.com txt
"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpwIY7xwus1pBq4AI7UykGGsDVmR0gmotZ+turXGGfcw5n2gDY4+gl+WHYOlUVWZAcN4P3RjEEsOcoqMslubKR/72eNjnF2FbVlQESs9f0IJesSyZuCSr7ukrj1MB75DZQzV/CnNFFQYrRJ6UUX+dp+nhiZ8dCAPdx/EjJgeZ2j7cJgCsyZd2cDgQjFmu3Wq2" "d6hDLGO/GPLiAwR9ksmnJqYzZtPt73sv18kHJTiu8mOuWkdJ2mCliXeLqMf5Z0btt96eS72DDGxkfHdI8Iakgl9guYgmB+x289E9QjI1H//eyc6TwWXLEc/Z/pbhC/fv5svAx0KCtmBIsK2FG8YPQIDAQAB"

There is no problem with the record returned by Cloudflare. Make sure you have pasted the correct code into the DNS (you can show a screenshot of what Google is asking you to set), otherwise talk to Google.

1 Like

Hi thank you for your help, Is there any better Email not just SMTP or how to configure incoming and outgoing separately
Any DNS host you could recommend? Microsoft Outlook for domain is better?
I even couldn’t pick Google Workspace Essentials and I started using Google Gmail for domains since 2010 but 2 years ago this accounts got disabled as I didn’t log in for long time
Any idea how to contact Google Help/support?
In Google Workspace there is 2d6h together and in Cloudflare is 2" "d6h

I checked With https://dkimvalidator.com (search that key in browser it matches but still Google Workplace witll not authenticate. Any onother DNS? Even old Resellerclub control panel DNS do a better job. I wanted to register with other (better to transfer domain?)
Received: from mail-ej1-f45.google.com (mail-ej1-f45.google.com [209.85.218.45]) - Pastebin.com

DNS host name (TXT record name):
google._domainkey

TXT record value:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpwIY7xwus1pBq4AI7UykGGsDVmR0gmotZ+turXGGfcw5n2gDY4+gl+WHYOlUVWZAcN4P3RjEEsOcoqMslubKR/72eNjnF2FbVlQESs9f0IJesSyZuCSr7ukrj1MB75DZQzV/CnNFFQYrRJ6UUX+dp+nhiZ8dCAPdx/EjJgeZ2j7cJgCsyZd2cDgQjFmu3Wq2d6hDLGO/GPLiAwR9ksmnJqYzZtPt73sv18kHJTiu8mOuWkdJ2mCliXeLqMf5Z0btt96eS72DDGxkfHdI8Iakgl9guYgmB+x289E9QjI1H//eyc6TwWXLEc/Z/pbhC/fv5svAx0KCtmBIsK2FG8YPQIDAQAB

The DKIM record you pasted matches exactly with that returned from the DNS so there is no problem with the DNS record returned by Cloudflare. You’ll need to contact Google.

1 Like

Hi sjr thank you for your help. How I can contact Google Help?
Was maybe problem during verification process I changed DNS to Cloudflare as there were no middle entry field with Dynadot.com ?
Can I enter all the fields into subdomain? with Dynadot like google._domainkey
or I better buy cPanel hosting or using other free DNS hosting?
Do I need to create CNAME with www. to @ ?
Is there any problem I forwarded domain to linktr.ee ?
I don’t understand why DKIM doesn’t get verified should I try with 1024 bit ?

As you can see form your Pastebin link, - e.g.:

Building DNS Query for google._domainkey.lukaboltes.com
Retrieved this publickey from DNS: [...]
Validating Signature
 
result = pass

It claims that your DKIM is passing just fine.

-0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
-0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                            author's domain

DKIM_VALID_AU” is another sign, that your DKIM is working just fine.

So if your only concern is, that the Google Workspace tool is claiming, that your record cannot be verified, - then ignore that.

The Pastebin confirms that your set up is working perfectly fine.

I wouldn’t do that.

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.