Question ds record base64 key

[nMLxTMJTZ]

Server operating system version

ubuntu 24.04

Plesk version and microupdate number

18.0.69

Hi, when i try to add DS record in my OVH panel for my domain i give error "Public key should be encoded in Base64" where i can found it?

 

[Sebahat.hadzhi]

Is there any spacing in the key? If yes, please try removing the empty spaces and give it another go.

 

[nMLxTMJTZ]

no i not have space

 

[scsa20]

Did you generate the DNSSEC settings for the domain? You need to make sure you select the right DS Data Algorithm, Digest Type, and set the right Key Tag. The digest will be the data which is the info. The generated key for the DS should be Base64 already and you can verify by using Base64 Validator | Tools | Base64 to validate it.

 

[nMLxTMJTZ]

Resolved

l5 k/

the problem

 

[nMLxTMJTZ]

but now hou i can fix "The server responded with DNSKEY but not with expected NSEC or NSEC3."

 

[scsa20]

Just to make sure, you used the Plesk DNSSEC extension to generate the DNSSEC records on the domain then logged into the registrar (where you registered the domain) to add the generated records? Because the records you get from the extension is meant to be inserted where you've registered the domain on, not where you manage the DNS records. So if the DNS records is managed by OVH (and not on your Plesk server) and your registrar is somewhere else, then you would need to make the DNSSEC record from OVH to install with the registrar. If the DNS is actually managed by your Plesk server then you will want to make sure the that the name servers on the registrar actually points to your server and the DNSSEC entries generated and install the digest info into whoever the registrar is.

 

[nMLxTMJTZ]

yes i done this, DNSSEC extension, record on OVH but i have this problem "The server responded with DNSKEY but not with expected NSEC or NSEC3." now but also DNS sec work

 

[scsa20]

I wouldn't worry as long as everything else checks out fine then. You know if it's a problem if it's not resolving DNS at all.