Articles in this section

See more

Cannot sign DNS zone in DNSSEC extension: Cannot Sign the DNS zone: unknown algorithm, algorithm is not allowed

Avatar
Ekaterina Babenko
Updated
Follow

Symptoms

  • Cannot sign DNS zone in Subscriptions > example.com > DNSSEC extension > Sign the DNS with one of the following errors:

    PLESK_ERROR: The algorithm <SELECTED-ALGORITHM> was marked as not allowed."

    PLESK_ERROR: error: Execution CLI Utility is failed. dnsmng. dnsmng: Command line argument number 6 is unsafe dnsmng: Command line argument number 6 is unsafe

    PLESK_ERROR: Error: Unable to sign the DNS zone. Execution CLI utility is failed: dnsmng. dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
    Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
    System error 11: Resource temporarily unavailable dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
    Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
    System error 11: Resource temporarily unavailable

  • Unable to apply any settings in Extensions > DNSSEC:

    CONFIG_TEXT: This option is not supported.
    dc.jpg

Cause

Product issue:

  • #EXTDNSSEC-59 "Allowed algorithms for key generation now have correct values, which makes it possible to sign DNS zones."
    Fixed in:

Resolution

Please consider updating your server:

Workaround

If update is not possible for some reason you may try the following

workaround

  1. Connect to the server via SSH

  2. Remove DNSSEC: Plesk > Extensions > My Extensions > DNSSEC > More > Remove
  3. Install DNSSEC extension again, do not open it: Plesk > Extensions
  4. Download a hotfix and unzip it

    # wget https://plesk.zendesk.com/hc/article_attachments/360005014439/dnssec-Config.zip

    # unzip dnssec-Config.zip

  5. Replace /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php with the unzipped one

    # cp /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php{,.backup}
    # cp ./Config.php  /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php

Comments

4 comments

Sort by Date Votes
  • Avatar
    Arif Calhan

    i have done what you here write but problem still exists :(

    0
    Comment actions Permalink
  • Avatar
    Anton Maslov

    @Arif

    I recommend to create a ticket then to figure out the reason.

    0
    Comment actions Permalink
  • Avatar
    Kirk Macdonald

    you need to uninstall the extension then reinstall it

    then before opening the extension copy the hotfix patch as suggested then open the dnssec extension and it works

    Just tested this patch and it is working for me BUT YOU HAVE TO UNISTALL THEN REINSTALL to clear the entries in the db

    0
    Comment actions Permalink
  • Avatar
    Ekaterina Babenko

    HI Kirk Macdonald,
    Thank you for your input. The article has already been updated with all steps required 

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles