On Fri, Aug 3, 2012 at 3:01 AM, Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org" target="_blank">marka@isc.org</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div id=":500"> The DNSKEY/DS disagree on the DNSSEC algorithm in use.<br>
<br>
                        5 != 7<br></div></blockquote></div><br><div><br></div><div>Thanks a lot Mark.</div><div><br></div><div>My Registar's GUI, when entering my DS record, has these options for the algorithm:</div>

<div><br></div><div><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">DSA/SHA1 </span><br style="padding:0px;margin:0px!important;font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">

<span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">DSA-NSEC3-SHA1 </span><br style="padding:0px;margin:0px!important;font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">

<span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">RSA/SHA-1 </span><br style="padding:0px;margin:0px!important;font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">

<span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">RSA/SHA-256 </span><br style="padding:0px;margin:0px!important;font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">

<span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">RSA/SHA-512 </span><br style="padding:0px;margin:0px!important;font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">

<span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">RSASHA1-NSEC3-SHA1 </span></div><div><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)"><br>

</span></div><div><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">While my ds file shows the </span><span style="font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)">algorithm </span><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">as being 7.</span></div>

<div><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)"><br></span></div><div><span style="font-family:arial,helvetica,FreeSans,sans-serif;font-size:12px;background-color:rgb(255,255,255)">Which one is 7? I looked at the </span><a href="http://www.ietf.org/rfc/rfc4034.txt" style="color:rgb(0,0,0);font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)">RFC 4034</a><span style="font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)"> but could not find a number 7 algorithm!</span></div>

<div><span style="font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)"><br></span></div><div><span style="font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)">Thanks,</span></div>

<div><span style="font-family:Arial,Helvetica,Verdana;font-size:13px;background-color:rgb(255,255,255)">Mohamed.</span></div>