Need Help DKIM Configuration WHM

edzzone

Member
Sep 22, 2012
6
0
1
cPanel Access Level
Root Administrator
Hi

How to enable DKIM properly? when I create an account on a my preferred package in WHM I always enable this two options Enable DKIM on this account and Enable SPF on this account. When I check on the cpanel for the said account under email authentication DKIM and SPF are all enabled and it says Status: Enabled & Active (DNS Check Passed).

My problem is when I send an email using that account only SPF pass and DKIM always have error like this dkim=permerror (no key) but it does contain a DKIM-Signature in the header and so with domainkeys=neutral (no sig)

Here is an example of the header I receive when I send an email to my yahoo mail. Kindly use this for your reference.
X-Apparently-To: [email protected] via 98.139.211.231; Mon, 18 Mar 2013 08:54:03 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of mydomain.com designates xxx.xx.xxx.xx as permitted sender)
Authentication-Results: mta1114.mail.ne1.yahoo.com from=mydomain.com; domainkeys=neutral (no sig); from=mydomain.com; dkim=permerror (no key)
Received: from 127.0.0.1 (EHLO mydomain.com) (xxx.xx.xxx.xx)
by mta1114.mail.ne1.yahoo.com with SMTP; Mon, 18 Mar 2013 08:54:01 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mydomain.com; s=default;
h=Date:MIME-Version:Content-Type:To:Subject:From; bh=HGuUNNVd6cLRfvaJXgPTU5mPSo9wLLCWjCKYvCjKJOg=;
b=I3pzmJA7AKJ1B+upRo+yhfXvg/AJg3d5TtpA38TKr+bgo0ioRaHpTDmesQA3ANSMPDJ2flmEuIzyQqlw3P1LRIYX9NBgkR9fH+Eo2d0rqcqI01WOiKJ5a7bsvrqBr13O9viY2ybCvmYk7jv3ycEhGpDsHURXMHn+yXP8u7MeqbE=;

Can anyone help me with this problem on how to configure DKIM properly under WHM/cpanel?

Thank you in advance.

Ed
 

edzzone

Member
Sep 22, 2012
6
0
1
cPanel Access Level
Root Administrator
anyone can help me configure dkim properly? coz i still got dkim=permerror (no key) in my email header even if all is being activated as stated above inside whm/cpanel. thank you
 

jimlongo

Well-Known Member
Mar 20, 2008
289
24
68
I get similar results, there is a DKIM signature but it does not pass.

Code:
<[email protected]>.
Thank you for using the verifier,The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         fail
Sender-ID check:    pass
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname:  mydomain.com
Source IP:      66.84.x.x
mail-from:      [email protected]

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: [email protected]
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         fail (signature doesn't verify)
It explains "fail"
The message was signed and the signature or signatures were
acceptable to the verifier, but they failed the verification
test(s).
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,267
463
Hello :)

Is the DNS for this domain name handled on the cPanel server? If so, have you tried uninstalling, and reinstalling the DKIM record? EX:

Code:
/usr/local/cpanel/bin/dkim_keys_uninstall username
/usr/local/cpanel/bin/dkim_keys_install username
Thank you.
 

jimlongo

Well-Known Member
Mar 20, 2008
289
24
68
Thanks cPanelMichael

I did as you suggested reinstalling the DKIM record and that fixes the DKIM verification.
Code:
Thank you for using the verifier,
The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: [email protected]
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         pass (matches From: [email protected])
ID(s) verified: header.d=mydomain.com
Canonicalized Headers:
   mime-version:1.0'20'(Apple'20'Message'20'framework'20'v1283)'0D''0A'
   to:[email protected]'0D''0A'
   message-id:<[email protected]>'0D''0A'
   date:Thu,'20'29'20'Aug'20'2013'20'11:50:20'20'-0400'0D''0A'
   subject:test'20'dkim'0D''0A'
   content-transfer-encoding:7bit'0D''0A'
   content-type:text/plain;'20'charset=us-ascii'0D''0A'
   from:Jim'20'<[email protected]>'0D''0A'
   dkim-signature:v=1;'20'a=rsa-sha256;'20'q=dns/txt;'20'c=relaxed/relaxed;'20'd=mydomain.com;'20's=default;'20'h=Mime-Version:To:Message-Id:Date:Subject:Content-Transfer-Encoding:Content-Type:From;'xxxxxxxxxxxxxx;'20'b=;