dnssec

We are trying to add DS-records to a DNS-zone to activate DNSSEC but since one of the last Plesk updates, the domain field became required. This means you are only allowed to add DS-records in a sub-domain case. This used to me allowed even if the domain field is empty and it has always worked...

I have some domains on my server where DNSSEC works flawlessly, but also some where it simply doesn't work. I have already tried 'plesk repair dns -y' and 'plesk repair installation', regenerate the keys. Also I have a domain that gives the error: named[2037]: dns_dnssec_keylistfromrdataset...

Hi, I have a problem with DANE for few days now. I get some feedback from customers, that they can´t send Mails to my mailboxes. They´re getting this Error: DANE Security Alert: Unable to verify MX mail.xxxx.de (DANE-EE: DANE Certificate Association Data does not match client certificate...

Hello, Since i switched servers from Centos 7 to Ubuntu 22.04LTS i have been problems with DNSSEC. I installed the DNSSEC App and then signed all domains. Then updated the Registrat and secondaire DNS servers. But i got errors that the domains where not resolvable. When using the DIG command and...

In the recent update to Obsidian this was announced:"Added the ability to add Transport Layer Security Authentication (TLSA) DNS records to domains’ DNS zones in Plesk. Such records are most commonly used to implement DNS-based Authentication of Named Entities (DANE)." Where can I find more...

Question, I deleted a website in plesk onyx, but it appears: "Warning: The DNSSEC signed zone of xxxxxxx.com has been removed. Remove the corresponding DS resource records from the main zone." I would greatly appreciate some light on the problem. Thanks!!

Hi, Plesk offers a feature of DNSSEC to sign the existing DNS records. When activating it, one gets 4 DS records, and two public keys (DNSKEY). There are NO instructions what so ever on Plesk , what to do with those. And it's not the process is completed... According to this erbsite, test...

Hello, I configured DNS with Plesk and it worked like a charme. But than I tried to configure DNSSEC. I followed the intructions in this link: DNSSEC configuration After restart of the DNS-Service the DNSSEC-Zone is not loading. In the Server-Log I find this messages: But nothing said that...

Hello, I am writing here because for some reason my license appears as invalid on the PLESK support page and I cannot write a ticket there. Some months ago I have detected a problem that could be serious and I don't know if it happens to all of you. The problem is that if DNSSEC is activated...

Since the suggestion is made in !2016! for support on DNSSEC on Windows, still not a single reaction besides "We will consider" and "Vote". Its a serious thing for security and it should be a priority for Plesk. Now making a topic on the Obidian forum also, so it doesnt get forgotten :) Please...

I'm getting /var/log/messages flooded with this message: May 27 14:14:08 pleskserver named[2900]: dns_dnssec_keylistfromrdataset: error reading keys/example.com/Kexample.com.+008+55113.private: file not found And yes, in /var/named/chroot/var/keys/example.com/ that file does not exist. There...

Good afternoon, Last week we tested the implementation of DNSSEC on our Plesk servers. Almost everything seems to work fine, including our slave DNS (this is not a Plesk Server). But when we run a DNS test on Zonemaster, DNSViz | A DNS visualization tool or DNSSEC Analyzer We keep getting an...

I'm confused about where I'm supposed to add the DS records for DNSSEC. I added them in plesk under DNS settings, but the DNSSEC analyser at DNSSEC Analyzer still says they don't exist (I waited a week.) I have removed them now but I'm not sure where to put them. Thanks.

How do we generate new DNSSEC keys for a previously signed domain? After making some DNS changes we see the following when generating a DNSreport from dnsstuff.com: ns.XXXX.org. appears to have a signed A record with a key I can no longer find keyTag=48423 ns.XXXX.org. appears to have a...

TITLE: CAA entry is not covered by DNSSEC PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE: Ubuntu 16.04, Plesk 17.8.11, MU #1 PROBLEM DESCRIPTION: After adding a CAA entry in DNS (and waiting serval days) a DNS query responds with: STEPS TO REPRODUCE: Enable (and configure)...

Good afternoon. I have the DNSSEC extension enabled. When the zone expires, will this extension resign the zone automatically? Or do I have to resign manually?

Hi, i think i didn't understand it correctly. How do i manage to use DNSSEC with external DNS / Domain Robot with DNS? i installed tool, generated records via Plesk and set them to my Domain Robot. But this fails all the Time saying: "Inconsistent security for xxx.xx - DS found at parent...

Hello! I just tried the new DNSSEC extension, which is working very well. But to have DNSSEC alone is boring. :) So I want to use DANE. But for this... I need TLSA records in my dns zone. Is it possible that you can add them soon? Thanks! Tim

What is the differents to do manual dnssec setup and buying the addon ($4.50 p/m) and have a giu ? (Should this work or not) Manual setup: https://www.digitalocean.com/community/tutorials/how-to-setup-dnssec-on-an-authoritative-bind-dns-server--2