AMAZON SES > DigitalOcean CNAME not working

April 13, 2017 931 views
API Control Panels Configuration Management DigitalOcean Ubuntu

Hello EVeryone,

This is my website http://workwatch.co.nz

I have the domain registered through Discount domains. But I'm using DigitalOcean to handle all the DNS records.

Everything is sweet, But I cannot seem to setup the AMAZON SES DKIM records with the DigitalOCean control panel.

I entered the CNAME values as given to me, but the verifications on AWS control panel fails continuously. Any help with this would be really appreciated.

Sahan.

1 Answer

Forgive me if I'm wrong, but usually, DKIM/SPF are TXT records, usually also used for verifications,not CNAME's - have may want to confirm (https://docs.aws.amazon.com/ses/latest/DeveloperGuide/dns-txt-records.html) as SES says it confirms with TXT records and if you are putting them in as CNAME's that may be the issue at hand.

  • @mrcbrown thanks for the answer, but if you see here, AWS gives me this
    http://i.imgur.com/eAdHBOi.png

    • @timesheetapp007 few followup questions:

      • Do you get any sort of error on the DO side when trying to put these CNAME's in?
      • Are they live and in place now?
      • Have you tried to query these CNAMES both locally and from say https://dnschecker.org/?

      Don't work for DO but have had issues with DNS and Amazon (not specifically SES) but sometimes if it catches it wrong, it can be 72 hours before like it notes, but definitely confirming it externally (DNS Checker is great) might bring up something to fix/adjust or open a ticket with DO specifically if something isn't rendering correctly.

        1. No Errors
        2. They are live and in place at DO waiting for AWS to catch on
        3. Not tried. Will try now
      • Not sure which value to enter at dnschecker.org ?
        Do I enter xxxx.workwatch.co.nz OR xxxx.dkim.amazonses.com ?

        • Ones relating to your domain and pick CNAME - it'll report back general propagation, but bear in mind this isn't a perfect test, some providers do cache, so it's a rough idea.

Have another answer? Share your knowledge.