Sign zone (DNSSEC) / Not working for me.

Discussion in 'Installation/Configuration' started by SuperLOL, Jan 26, 2018.

  1. SuperLOL

    SuperLOL Member

    HI.
    I setup a DNS Zone but ISPConfig doesn't give my any output in the "DNSSEC DS-Data for registry" field. o_O
    Does anyone know how i can fix this problem?
    EDIT:
    I have now setup DKIM for my eMails this works but ISPConfig willl not Generate any DNSSEC-Key(s) for my Domains i also see any button to Generate it and i also don`t have a multi-server setups. :(
     
    Last edited: Jan 28, 2018
  2. SuperLOL

    SuperLOL Member

    Does anyone here had setup DNSSEC in ISPConfig? Can any one here tell me how to setup DNSSEC in ISPConfig? I`m not sure if i miss something or if something is brock. o_O
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Check if you have the haveged program installed and if it is started. if not, install and start it. DNSSEC keys can only be generated when there is enough entropy to create the cert securely.
     
  4. SuperLOL

    SuperLOL Member

    I checked this and haveged is started and the Server entropy is over 3500. :confused:
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    SuperLOL likes this.
  6. SuperLOL

    SuperLOL Member

    After enabling the Debug Log in the ISPConfig i found out what i did wrong.
    I forgot to add the (.) at the end of some DNS entries:
    domain.tld -> domain.tld.
    :rolleyes:
     
    Last edited: Jan 31, 2018

Share This Page