Skip to main content

My emails aren't signing GoDaddy VPS

Comments

14 comments

  • MrCanada
    Might be making some headway... I checked exim_paniclog and noticed the following: unable to open private key file for reading: /var/cpanel/domain_keys/private/s1-2-3-4.secureserver.net (replaced my ip with 1-2-3-4) also I scrolled up and was also noticing: unable to open private key file for reading: /var/cpanel/domain_keys/private/example.com So when I went to /var/cpanel/domain_keys/private, there was nothing in there. Then I checked /cpanel/domain_keys/public, and nothing is in there either. Do I need to do something to make my keys appear in public and private? When I search for my dkim on mxtoolbox it looks like it is finding public key so I'm not sure what's wrong?
    0
  • cPanelMichael
    Hello, Can you open a support ticket using the link in my signature so we can take a closer look at your system to see how Exim is configured? Note that you may want to reach out directly to GoDaddy first to see if they can take a closer look. Thank you.
    0
  • MrCanada
    Thank you for your response. How does the WHM Authentication process work? Under WHM > Authentication > DKIM > Enable, when I press Enable does it attempt to place the DKIM public and private key somewhere on my server, and if so, where? Centos if it matters. Edit: I found this quote. I am wondering if it is correct? [quote]CPanel stores these files in /var/cpanel/domain_keys, where the public folder contains the key reflected in the DNS zone, and the private folder contains the private key.
    Thank you.
    0
  • cPanelMichael
    Hello, The "Authentication" option is found in cPanel as opposed to WHM. Using the option to setup DKIM generates the keys, and then populates the TXT record in the DNS zone of the domain names under the account. The DKIM keys are stored in the following directory: /var/cpanel/domain_keys/ Thank you.
    0
  • MrCanada
    Hello, The "Authentication" option is found in cPanel as opposed to WHM. Using the option to setup DKIM generates the keys, and then populates the TXT record in the DNS zone of the domain names under the account. The DKIM keys are stored in the following directory: /var/cpanel/domain_keys/ Thank you.

    Thank you for your reply. I don't see anything in /var/cpanel/domain_keys/ other than empty public and private folders where the keys should be. Was it the DKIM enable that created these folders? I guess if I just create the keys myself and edit my DNS it should be ok?
    0
  • sparek-3
    Did you run: /usr/local/cpanel/bin/dkim_keys_install For the specific owner of the account in question?
    0
  • MrCanada
    Did you run: /usr/local/cpanel/bin/dkim_keys_install For the specific owner of the account in question?

    Thanks for your response. Since I've never heard of this dkim_keys_install I would say no I've never run it (unless it runs automatically when enabling DKIM in cPanel?). Is running this what will create the keys in /var/cpanel/domain_keys/public and /var/cpanel/domain_keys/private? Shouldn't enabling DKIM in cPanel > Authentication > Enable DKIM have done anything running dkim_keys_install does?
    0
  • sparek-3
    It's what I do. I guess you can also do it from the user's cPanel by clicking on something. I'm much more of a command-line guy myself. Of course, if someone doesn't have root access to the server, then they won't be able to run root commands. I've never been really sure how this command takes a user as an argument as opposed to a domain name. It create DKIM keys (public/private) for all of the current domains owned by that user. Does it create DKIM keys for future domains created by that user? The server won't automatically create DKIM keys for accounts unless you enable the option some where in WHM's tweak settings (I'm too lazy to look up that option name at the moment... again, I'm more command line than GUI).
    0
  • MrCanada
    Thanks! Running the dkim_keys_install script put the keys in my public and private folders. A step forward for sure. I will post an update to see how the rest goes.
    0
  • MrCanada
    Problem solved! For future reference anyone looking at this in the future As @sparek-3 suggested, all I had to do was run the script /usr/local/cpanel/bin/dkim_keys_install and then immediately my emails were being signed (previously they weren't even being signed) and the DKIM is now passing in the emails I send. It should be noted that before running the script I had already enabled DKIM in cPanel > Authentication > Enable DKIM. However, doing it in cPanel didn't create the keys like running the script did. Enabling DKIM in cPanel did however create the correct DNS record. Thank you @sparek-3 and @cPanelMichael
    0
  • cPanelMichael
    It should be noted that before running the script I had already enabled DKIM in cPanel > Authentication > Enable DKIM. However, doing it in cPanel didn't create the keys like running the script did. Enabling DKIM in cPanel did however create the correct DNS record.

    Hello, On a test server, enabling DKIM via "cPanel >> Authentication" generates the key files in the /var/cpanel/domain_keys/public/ and /var/cpanel/domain_keys/private/ directories. Disabling DKIM removes the keys. I confirmed this works for both the primary domain name associated with the account, and it's addon domain names. What version of cPanel are you using, and did you notice any error messages in /usr/local/cpanel/logs/error_log when using the Authentication option to enable DKIM via cPanel? Thank you.
    0
  • ncpowerbrute
    DKIM is not working properly as originally reported. The dkim is not only broken for the individuals it is broken at the domain entry in the DNS. Since the enable/disable doesn't work through CPanel itself what is the correct method to fix this if there are multiple domains and multiple users per domain so that it remains persistent?
    0
  • cPanelMichael
    DKIM is not working properly as originally reported. The dkim is not only broken for the individuals it is broken at the domain entry in the DNS. Since the enable/disable doesn't work through CPanel itself what is the correct method to fix this if there are multiple domains and multiple users per domain so that it remains persistent?

    I've not been able to reproduce this behavior. Could you open a support ticket using the link in my signature so we can take a closer look? Thank you.
    0
  • ncpowerbrute
    This is the answer we were looking for. In Cpanel while we were in a ssh session and monitoring the directory we never saw any files deleted when DKIM was disabled from CPanel. However, when a script similar to below was executed it provided the desired result of overwriting the exiting key files with new domainkeys for all of the user accounts. We then need to wait for the DNS to propogate and confirmed the mail clients were using the exact same hostname (for us just the domain name without the hostname) as the MX entry in the DNS record. for user in `ls -A /var/cpanel/users` ; do /usr/local/cpanel/bin/dkim_keys_install $user ; done We want to credit thecpaneladmin for the solution found here Installing DomainKeys and SPF Records - The cPanel Admin
    0

Please sign in to leave a comment.