• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Resolved CentOS 7.x - Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP384SHA384 when attempting to sign DNSSEC

Matt N

New Pleskian
Hi All!

when attempting to sing my domain using Plesk's DNSSEC setup, I get the following error:

Error: Unable to sign the DNS zone. Execution CLI utility is failed: dnsmng. dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
Stdout:
Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP384SHA384


System error 11: Resource temporarily unavailable dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
Stdout:
Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP384SHA384


System error 11: Resource temporarily unavailable

The DNSSEC plugin set up okay, and accepted all of the available Encryption types. However, I get this, with almost any of the available Encryption types (I have not tried them all).

System is running:
Plesk Version : 18.0.32 (update #2) OS : CloudLinux 7.9

I've searched the web - but was not able to find anything that remotely resembles this issue. Looking for ideas of what to try. Because this is related to encryption algorithms, I'm reluctant to just try random stuff.
 
What is the version of your DNSSEC Plesk extension?
As far as I know, this issue was fixed a long time ago in version 1.2.2
 
according to the extension itself, it shows as Version 1.2.3-93.

just wondering whether I should remove and re-add it to see if something failed to update properly.
 
according to the extension itself, it shows as Version 1.2.3-93.

just wondering whether I should remove and re-add it to see if something failed to update properly.

removing then reinstalling the extension fixed it .... weird! :)
Thanks @IgorG!
 
Back
Top