Re: Issue with DNSSEC on subdomains (only)
Support SimpleRezo via Pdns-users <[email protected]>
| Newsgroups | gmane.network.dns.powerdns.user |
|---|---|
| Message-ID | <CALVu1vb6oc6z4XhHbm1wRoVVbEHebfMe+iABm1x_ijy8JDx--A@mail.gmail.com> |
Hi My bad, I don't know why I were starting thinking records were generated by powerDNS ! Thanks a lot for your help, I have been able to fix issue from our side \o/ Best regards -- Clement SimpleRezo Le lun. 15 juil. 2024 à 09:00, Peter van Dijk via Pdns-users <[email protected]> a écrit : > > On Sun, 2024-07-14 at 16:02 +0200, Support SimpleRezo via Pdns-users > wrote: > > Hi > > > > I have trouble rolling over DNSSEC keys on subdomains (no issue for > > domains but for all subdomains): DS digest returned by PowerDNS > > queries are incorrects. Calculation from my side but also from > > pdnsutil differs from DNS responses. > > > > $ drill ds @ns1.simplerezo.com help.simplerezo.com > > help.simplerezo.com. 7200 IN DS 52911 10 2 > > 058728e3151830ce369137e0f50d6d5181b4885a853abb52076f441bcc586f8b > > help.simplerezo.com. 7200 IN DS 46522 13 2 > > 6504f604d391e1b40e860f3b2d2bff08f672239f4516471659383ca9d287f8fb > > This comes from your database. PowerDNS does not calculate DS results for > you during query handling. You may need to update these DSes yourself by > taking the output from `pdnsutil show-zone help.simplezero.com` and > putting the DSes in the database inside the `simplezero.com` zone. > > Kind regards, > -- > Peter van Dijk > PowerDNS.com B.V. - https://www.powerdns.com/ > _______________________________________________ > Pdns-users mailing list > [email protected] > https://mailman.powerdns.com/mailman/listinfo/pdns-users _______________________________________________ Pdns-users mailing list [email protected] https://mailman.powerdns.com/mailman/listinfo/pdns-users