DKIM signature does not corespond with DKIM record generated

simonc

Hello,

I went to Mailcow dockerized admin and generated a DKIM key for a domain. Then I took the DNS record it shows and I applied it to my Cloudflare (as always). That worked and DNS record is showed correctly in mail-teste.com, but it reports that emails sent from the server are signed by a different, not corresponding/valid key, so my score is way lower than it should be.

I tried to restart the server to apply the new key, but no progress. Any idea how to fix this issue?

You can spot the diference easile here: https://www.mail-tester.com/test-bh0qqvpyx&reloaded=1 (the public key is what mailcow provided)

simonc

Hello, is there anyone to help? I am still unable to resolve the issue and the forum looks like inactive.

MAGIC

Hm I compared the DNS via https://toolbox.googleapps.com/apps/dig/#TXT/ and the mail-tester link with the extracted signature and there something different:

DNS:

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0n+CwNRNQQYPu3rdqicjWDibSQEs8ywOQeWBj3+2Ck/k7FFQvzv5JilPEe6k9d1jMGKA0JV3LgHgAC/qVJaTip0P/0o9puWrZ8RJMWLK6hMbh32YOlnuc5Wpvb8F6tooPv/D4Orbbwr4cAcqXYIaczhGkuiv1VDuoPkY4WTc8qK6r2DGMHuGxV,ZCjN+n3CuwzimASk8X1BhprOq4qbhFntlFi3/iRg9LMF64pboy429Wj4YymVtsVZlVUia6Z3vKdycO0BbUFxjFcSyIE/0VvOXJqpyiZ3TviW/0DY9Kjh1hrkuFYwAviwJjOhVlmzAdIRaSQoLxXgjkXphHQ0qQwIDAQAB

mail-tester:

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0n+CwNRNQQYPu3rdqicjWDibSQEs8ywOQeWBj3+2Ck/k7FFQvzv5JilPEe6k9d1jMGKA0JV3LgHgAC/qVJaTip0P/0o9puWrZ8RJMWLK6hMbh32YOlnuc5Wpvb8F6tooPv/D4Orbbwr4cAcqXYIaczhGkuiv1VDuoPkY4WTc8qK6r2DGMHuGxVZCjN+n3CuwzimASk8X1BhprOq4qbhFntlFi3/iRg9LMF64pboy429Wj4YymVtsVZlVUia6Z3vKdycO0BbUFxjFcSyIE/0VvOXJqpyiZ3TviW/0DY9Kjh1hrkuFYwAviwJjOhVlmzAdIRaSQoLxXgjkXphHQ0qQwIDAQAB

There’s a comma in the DNS but not in the extracted signature. Can you double check it?