Shopify requires a CAA record with cansignhttpexchanges

Simon Greenwood

• May 06, 2025 13:03

We have a client who have a customer who wants to set up a Shopify shop using cPanel DNS. One of the requirements is a DNS CAA record with the value "pki.goog; cansignhttpexchanges=yes". cPanel won't set a record like this up, returning the error:

You must enter a valid zone name or a single semicolon.

Save Record "

Shopify won't validate the domain without this, although an entry for pki.goog works correctly. The CAA records are added in the legacy zone file format so I can't see that it would be possible to add the string manually.

Is there a way of doing this or is it it planned to be added in future?

• 

  cPRex Jurassic Moderator

  • May 06, 2025 13:43

  Hey there!  Just to confirm, the client is trying to do this in cPanel >> Zone Editor, using the details here?

  https://help.shopify.com/en/manual/domains/managing-domains/secure-connections

  0
• 

  Simon Greenwood

  • May 06, 2025 13:44

  Yes, that's correct.

  0
• 

  cPRex Jurassic Moderator

  • May 06, 2025 13:46

  Thanks for the confirmation - let me do some testing with this and I'll get back with you soon!

  0
• 

  cPRex Jurassic Moderator

  • May 06, 2025 15:57
  • Edited

  I tested this on my end and confirmed there's no way to add that record.  I've created case CPANEL-46575 with our developers to see if they can get that functionality added.  I've also linked this thread to that case so I'll be sure to share any updates if I hear them!

  0
• 

  Simon Greenwood

  • May 06, 2025 16:49

  Thanks!

  0
• 

  cPRex Jurassic Moderator

  • May 06, 2025 16:50

  You're very welcome!

  0

Please sign in to leave a comment.