Hi, I am trying to publish DS records for desec.io with the .io registry. Upon entering the DS records in their web interface, I get the following error:
> The Algorithm and data do not match in your DS record I am surprised, because the records are from pdnssec show-zone: # pdnssec show-zone desec.io Zone is not presigned Zone has hashed NSEC3 semantics, configuration: 1 0 10 fa73040f3a2a2b29 keys: ID = 28 (KSK), tag = 6454, algo = 8, bits = 2048 Active: 1 ( RSASHA256 ) KSK DNSKEY = desec.io IN DNSKEY 257 3 8 AwEAAcw5QLr0IjC0wKbGoBPQv4qmeqHy9mvL5qGQTuaG5TSrNqEAR6b/qvxDx6my4JmEmjUPA1JeEI9YfTUieMr2UZflu7aIbZFLw0vqiYrywCGrCHXLalOrEOmrvAxLvq4vHtuTlH7JIszzYBSes8g1vle6KG7xXiP3U5Ll96Qiu6bZ31rlMQSPB20xbqJJh6psNSrQs41QvdcXAej+K2Hl1Wd8kPriec4AgiBEh8sk5Pp8W9ROLQ7PcbqqttFaW2m7N/Wy4qcFU13roWKDEAstbxH5CHPoBfZSbIwK4KM6BK/uDHpSPIbiOvOCW+lvu9TAiZPc0oysY6aslO7jXv16Gws= ; ( RSASHA256 ) DS = desec.io IN DS 6454 8 1 24396e17e36d031f71c354b06a979a67a01f503e ; ( SHA1 digest ) DS = desec.io IN DS 6454 8 2 5cba665a006f6487625c6218522f09bd3673c25fa10f25cb18459aa10df1f520 ; ( SHA256 digest ) DS = desec.io IN DS 6454 8 3 d0fdc4ab1e4f65740bc42432e7e991faac873f546e023057533fb16ce7a8dc45 ; ( GOST R 34.11-94 digest ) DS = desec.io IN DS 6454 8 4 38edfe972014bb081e4f5d72078e268a69bafa6b61013eeaaa1f805c936d79a4e12bb22d9a25f7a034b77e4700da8a5e ; ( SHA-384 digest ) ID = 29 (ZSK), tag = 32110, algo = 8, bits = 1024 Active: 1 ( RSASHA256 ) I really would appreciate if you could help me fix this problem. Thanks, Peter -- OpenPGP Key: 0x3EF22D2F
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
