[dns-operations] Help with DNSSEC config

David Miller dmiller at tiggee.com
Fri Aug 3 07:39:49 UTC 2012


On 8/3/2012 3:19 AM, Mohamed Lrhazi wrote:
> On Fri, Aug 3, 2012 at 3:01 AM, Mark Andrews <marka at isc.org> wrote:
>
>>  The DNSKEY/DS disagree on the DNSSEC algorithm in use.
>>
>>                         5 != 7
>>
>
> Thanks a lot Mark.
>
> My Registar's GUI, when entering my DS record, has these options for the
> algorithm:
>
> DSA/SHA1
> DSA-NSEC3-SHA1
> RSA/SHA-1
> RSA/SHA-256
> RSA/SHA-512
> RSASHA1-NSEC3-SHA1
>
> While my ds file shows the algorithm as being 7.
>
> Which one is 7? I looked at the RFC
> 4034<http://www.ietf.org/rfc/rfc4034.txt> but
> could not find a number 7 algorithm!
>
> Thanks,
> Mohamed.

I think that you are looking for this:
http://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xml

-DMM




More information about the dns-operations mailing list