DKIM settings from gsuite to cloud-dns

[i...@wienand.org]

Hi,

It would be great if you could get together with the Gsuite people so that you can copy-paste the DKIM settings from the gmail admin panel straight into a cloud DNS txt record.

Currently it's rather confusing that if you copy the key directly, you have to split the record into multiple 256-char chunks and get the quoting correct. If pasted in directly, the dns UI just says the tag is invalid which doesn't really help figure out what's going wrong. [1] and [2] come up when you start searching.

Either the UI saying "this key is too long, split it up" or having the gmail side split it when it shows you the key would make this easier.

Thanks!

-i

[1] https://groups.google.com/d/msg/cloud-dns-discuss/k_l6JP-H29Y/lDhvhZKrBAAJ
[2] http://stackoverflow.com/questions/36688278/unable-to-setup-dkim-txt-value-as-dns-record

[Alex Dupuy]

We already had an internal issue tracking the Cloud DNS side of this problem, and have already implemented some warnings and advice when creating SPF/TXT records through the Google Cloud DNS Console interface; we'll look to extend that to cover DKIM and DMARC as well as the issue with string components longer than 255 bytes.

I opened an internal enhancement request for the Gmail side, but that's out of our hands. You should report this as well on the G Suite Help Forum, and contact G Suite support to report this as a problem (you can indicate that there is already an internal issue "Automatically split DKIM strings").

They are already aware of some other issues that exist with the larger 2048-bit DKIM keys rolled out this spring as some DNS hosting services cannot support TXT records with (multiple) strings (longer than 255 bytes) at all, so there is now an option to create 1024-bit DKIM keys that fit in less than 255 bytes.

[co...@sixohquad.com]

Hey guys, its 2018 now, we still can't copy/paste DKIM keys from GSuite Gmail settings into Cloud DNS. Can we get this figured out?

[cla...@rucheset.com]

Agreed!! I am having difficulty with this...does creating a 1024 bit DKIM key make the any difference?

[rsa...@gmail.com]

Yes - how can one add a DKIM key to Cloud DNS?

[sc...@pilates.io]

Hey Guys,

It's the middle of November 2018, is there a way to add Dmarc & Dkim?

[mohibul]

Hello,

As per GCP public documentation[1] DMARC & DKIM is a TXT record which is part of Advanced DNSSEC configuration of Cloud DNS. I could also find this link[2] on how to add the domain key to your domain's DNS records.  You could follow the steps mentioned here and would request you to follow the documentation[2] “split the key into multiple quoted text strings and enter them together in the TXT record value field” if you are facing any error.

Please let us know if you have any further query.

[1] https://cloud.google.com/dns/dnssec-advanced#spf-dkim-dmarc

[2] https://support.google.com/a/answer/173535?hl=en&ref_topic=2752442#