[Pdns-users] DS record: Algorithm and data inconsistent?

Pieter Lexis pieter.lexis at powerdns.com
Tue May 19 18:04:39 UTC 2015


Hi Peter,

On 05/19/2015 02:39 PM, Peter Thomassen wrote:
> I am trying to publish DS records for desec.io with the .io registry.
> Upon entering the DS records in their web interface, I get the
> following error:
>
>> >The Algorithm and data do not match in your DS record
> I am surprised, because the records are from pdnssec show-zone:
>
> # pdnssec show-zone desec.io

I tested you DNSKEY record using ldns-key2ds and get exactly the same 
results for every algorithm. I would advise you to open a ticket with 
nic.io.

It might also be that they simply don't accept GOST or SHA-384 DS records.

Best regards,

Pieter Lexis

--
Pieter Lexis
PowerDNS.COM BV - https://www.powerdns.com




More information about the Pdns-users mailing list