Setup DNSSEC

D

dayfly

Verified User
Joined
Sep 9, 2016
Messages
13
I am trying to setup DNSSEC for a domain dewijnimporteur.nl

i have acces to my registar, opendomainregistry.net

Could someone please point me into the right direction on how to get it working?
i have spend hours reading and trying but cant get it to work.
i tried to get details with http://dnssec-debugger.verisignlabs.com/dewijnimporteur.nl and dnsviz.net but cant really see what i am doing wrong, its a bit to techical for me.
Thought it would be easy with only genarating keys and entering them by in the registar.

Image ODR shows the data i put in there

Image from DA
da.png

Image from ODR
ODR.png


DNSSSEC - DNS Security
Keys
Keys listed below

zone-signing Key
Created: 20170111161814 (Wed Jan 11 17:18:14 2017)
Publish: 20170111161814 (Wed Jan 11 17:18:14 2017)
Activate: 20170111161814 (Wed Jan 11 17:18:14 2017)
Key ID: 55632
DNSKEY 256 3 5 AwEAAbpk3Pbyd3UNMKthBysIuvbDC9eCrJbkzYibPKHrtQKupv+rxCfS aOaHaY6aHINrPx/sSQ23cxv/Mr4u/X/mDe5Xclpn5t1sf/LK8RNBG0wE nRvOUblZPGldZgNxJBUvb4cfCeI4QP77ECxjFeRFCUY7rGmcBFrmJfdy fqZRhcKv


key-signing Key
Created: 20170111161814 (Wed Jan 11 17:18:14 2017)
Publish: 20170111161814 (Wed Jan 11 17:18:14 2017)
Activate: 20170111161814 (Wed Jan 11 17:18:14 2017)
Key ID: 4324
DNSKEY 257 3 5 AwEAAbN3oYqhiZITMOwYV1Ks+rfx8+mAN4n189TO5Sr7ZHZJKJVKhLyE OE2mTuLhDCO53XLOfAMWD4eJegvxZG/1BpK1CfTYOFV9vOtsFsWQAXxr wCwdFgcbtyemyCw5IE6h0HxHvPz63kQOCmVwzE5KLnXiHw/wvTThLGla irCpkoYocUqMKgvuUyslHBClD68d8BaHetzgDgSCqnRWh6YIQyJRkxmG GSvEtNsc2yokDZih8kchdI6xulzqUbh/5t/0IkyDXD8DJMIEZ/OjjGHI GWCp++NFy80IDmIxRAszX0On8jYK9uw1X3FR+yL5LzuWnrmdR5RruXzZ 9buiBpoTBB0=


Signed
Jan 11 17:18 2017 * * Expiry: Feb 15 14:18 2017

dewijnimporteur.nl. IN DS 4324 5 1 A26BA1AEB416D306646BC26054862DDC14763E97
dewijnimporteur.nl. IN DS 4324 5 2 EB74FD476CF6ED9DA5580D556D6B6C252DBADFF20FBB860BA6942EC7 6A633B4F
dewijnimporteur.nl.dlv.isc.org. IN DLV 4324 5 1 A26BA1AEB416D306646BC26054862DDC14763E97
dewijnimporteur.nl.dlv.isc.org. IN DLV 4324 5 2 EB74FD476CF6ED9DA5580D556D6B6C252DBADFF20FBB860BA6942EC7 6A633B4F
 
Hello,

When you specify KEY and/or DIGEST remove all white-spaces from them. Directadmin shows records with white-spaces, and they should be removed before you add them at a registry.
 
What is the key i need to add to the registry ?

i get an error Following error occured: Validation of the transaction failed from the registry if i enter the key without spaces
432451A26BA1AEB416D306646BC26054862DDC14763E97

this is the origianal key with spaces but i also get a error with that
4324 5 1 A26BA1AEB416D306646BC26054862DDC14763E97

With this key i dont get a error but internet.nl tells me its 'bogus'configuration error A26BA1AEB416D306646BC26054862DDC14763E97
https://www.internet.nl/site/dewijnimporteur.nl/results#
 
Last edited:
What is the key i need to add to the registry ?
Click to expand...

I don't know your registry... But for domains in .NL zone you should add (public) KEYS, not DS records as far as I know. You posted in the latest reply DS record with DIGEST.

I did not say anything about removing whitespaces between Key Tag, Algorithm and Digest Type. I mentioned only KEY and DIGEST.
See how are the things organised:

https://wiki.rrpproxy.net/DNSSEC
https://help.directadmin.com/item.php?id=651
 
Last edited:
Same issue

Hi Dayfly,

did you find a solution to the issue yet?
I have exact same issue. DA and ODR but can't get it working.

Please share if you know what to do.

Thanks
 
You must log in or register to reply here.
Back
Top