• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Issue BIND on Debian 13 / 18.0.74 problems with DNSSEC??

superfun2k23

New Pleskian
Server operating system version
Debian 13
Plesk version and microupdate number
18.0.74 #1
Hi, I have DNSSEC problems with Debian 13.

Already the problems started with upgrading 12.12 to 18.0.74 manual, but then support told me, manual upgrading is not supported, so I installed fresh Debian 13 and it still not works.

Every Domain with activated DNSSEC gets errors and keeps bind from starting..
It states that no matching dnssec-policy ist found for the domain used..
The problems started with upgrading to debian 18.0.74 and Debian 13, so it seems to be related to bind9 version used in Debian 13/Plesk 18.0.74, because in 73/deb12 IT used old auto-dnssec and moved now to new dnssec-policy and yet this ist not working..

Deleting named.conf ist a workaround, bit the file gets recreated by plesk, so bind stops working from time to time.

So maybe someone from support can look at this Situation?

My license isnfrom reseller, so any contact to support would take Long time, since my reseller first have to check and verify.. I hope to get a solution here fast
 
for anyone else getting problems with new bind on 18.0.74 Here is the solution:

Disable DNSSEC for all domains

1. plesk installer remove --components bind
2. apt purge bind9 bind9-utils bind9-host bind9-libs
3. apt autoremove
4. rm -rf /var/lib/bind
5. rm -rf /var/cache/bind
6. rm -rf /etc/systemd/system/named.service.d/
7. rm -rf /etc/systemd/system/bind9.service.d/
8. plesk installer add --components bind
9. plesk repair dns -y

Than re-enable DNSSEC for all domains with new keys and publish them
 
Back
Top