DKIM verification stuck — domainkey record format changed?

[lanbin]

Affected version

2.3.9

Hi,

I'm having issues with DKIM verification.
As far as I remember, earlier the record used to look like xenforo._domainkey, but now when generating it just shows ._domainkey.
Previously the verification would pass in about 2 minutes, but now it's been over an hour and I'm still seeing this message:

"Attempting to verify your DNS record but it may take up to 24 hours for DNS changes to propagate. If it has been longer, you may need to verify your entries."

 

[smallwheels]

I've tried to set up DKIM recently as well with no luck. Several tries but no avail. It seems to be trickier than it should be, given that there are a bunch of threads from people having issues with it.

One thread that I found particularly useful is this one:

XF 2.3 Thread 'Why can't I get XF's DKIM to validate?'

Jan 8, 2025

This is driving me crazy.
I have openssl extension installed and enabled on my server, as per requirements
I go to ACP->Options->Email Options and click Enable for DKIM option.
I get this box... and enter my domain properly (actually, it prepopulates the domain properly in this box, and i leave it as is):



I click Proceed and get the popup with the info I need for the new TXT record to add to my server:


I follow the steps EXACTLY... I go to my cpanel at my host and access:
cpanel->Zone Editor->{my domain}->Manage:

I make a new TXT record with the values...

• joshg
• Replies: 18
• Forum: Troubleshooting and problems

including this post with a hint that I wasn't able to try until now.

Others around the topic are i.e. these:

S

XF 2.3 Thread 'How to force dkim validation'

Oct 10, 2025

Is there a way to force XenForo to try DKIM validation after validation again instead of waiting 24 hours?

• stromb0li
• Replies: 2
• Forum: XenForo questions and support

XF 2.3 Thread 'Emails won't send'

Jul 23, 2025

Users have been reporting they aren't getting their OTP emails. After some DNS changes, the mail does send but will now always go to the spam folder. Using online email analyzers, it said that a DKIM record is invalid or not added at all, even though it is. I generated a DKIM in the email options of the Admin CP of XenForo and added it to our Cloudflare DNS records, and online DKIM checker tools say that "xenforo._domainkey" does return a valid DKIM, however when it comes to sending a test email, the DKIM signature is incorrect for some reason.

Here are the headers from the test email...

• My Dime Is Up
• Replies: 24
• Forum: Troubleshooting and problems

 

[lanbin]

The DKIM issue still remains in XenForo version 2.3.10. Today, out of curiosity, I created a test forum: https://d2e5f7551ef1e29c.demo-xenforo.com/2310/admin.php
(You may log in as the administrator with the username admin and password admin). There, the system similarly generates ._domainkey instead of xenforo._domainkey. After that, I wait 24 hours and still receive the same error.

@Chris D

 

[philmckrackon]

Do you have access to your mail server? DKIM should be configurable there. I do not use the XF setting.

 

[smallwheels]

Do you have access to your mail server? DKIM should be configurable there. I do not use the XF setting.

Obviously it heavily depends what way of mailing one is using. If you use an external/seperate mail server for relaying there is no need for DKIM configuration within XF. If you use the built-in mailer you will have the need, if you want to use DKIM.