PReimers
New Pleskian
TITLE:
CAA entry is not covered by DNSSEC
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:
Ubuntu 16.04, Plesk 17.8.11, MU #1
PROBLEM DESCRIPTION:
After adding a CAA entry in DNS (and waiting serval days) a DNS query responds with:
STEPS TO REPRODUCE:
The CAA record is not covered by the DNSSEC. This causes a SERVFAIL
EXPECTED RESULT:
The CAA record should be covered by the DNSSEC. No DNS Error should occur.
ANY ADDITIONAL INFORMATION:
Current Workaround: Disable DNSSEC
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:
Confirm bug
CAA entry is not covered by DNSSEC
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:
Ubuntu 16.04, Plesk 17.8.11, MU #1
PROBLEM DESCRIPTION:
After adding a CAA entry in DNS (and waiting serval days) a DNS query responds with:
id 12345
opcode QUERY
rcode SERVFAIL
flags QR RD RA
;QUESTION
example.com. IN CAA
;ANSWER ;
AUTHORITY ;
ADDITIONAL
STEPS TO REPRODUCE:
- Enable (and configure) DNSSEC
- Add a CAA Entry to the DNS
- Wait for the DNS to update
The CAA record is not covered by the DNSSEC. This causes a SERVFAIL
EXPECTED RESULT:
The CAA record should be covered by the DNSSEC. No DNS Error should occur.
ANY ADDITIONAL INFORMATION:
Current Workaround: Disable DNSSEC
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:
Confirm bug