Configuring DNSSEC algorithm for domains

Discussion in 'Installation/Configuration' started by Artesia, Apr 20, 2020.

  1. Artesia

    Artesia New Member

    Hi all,
    We've encountered a problem where SHA-1 algorithms will not be supported in the middle of 11th of May.
    Our registrar is OpenProvider, we want to kindly comply, however, I am unable to find where I can change the algorithms of generated keys for ISPconfig.

    I was wondering if anyone knows where I can manually change the generated key's algorithm?

    Thank you for your time.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The file is /usr/local/ispconfig/server/plugins-available/bind_plugin.inc.php
     
    Artesia likes this.
  3. BenM

    BenM Member

    Hi, can see that a change from NSEC3RSASHA1 to RSASHA256 is easy to change in the code, but thats not all. How to replace the old dnssec with the new one?

    The code prevents generating a new one! plz help?
    Regards, Ben
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

  5. BenM

    BenM Member

    Sorry iam not able to do so. Seems like a big impact!
     

Share This Page