Articles in this section

See more

Cannot sign DNS zone in DNSSEC extension: Cannot Sign the DNS zone: unknown algorithm, algorithm is not allowed

Avatar
Ekaterina Babenko
Updated
Follow

Symptoms

  • Cannot sign DNS zone in Subscriptions > example.com > DNSSEC extension > Sign the DNS with one of the following errors:

    PLESK_ERROR: The algorithm <SELECTED-ALGORITHM> was marked as not allowed."

    PLESK_ERROR: error: Execution CLI Utility is failed. dnsmng. dnsmng: Command line argument number 6 is unsafe dnsmng: Command line argument number 6 is unsafe

    PLESK_ERROR: Error: Unable to sign the DNS zone. Execution CLI utility is failed: dnsmng. dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
    Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
    System error 11: Resource temporarily unavailable dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
    Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
    System error 11: Resource temporarily unavailable

  • Unable to apply any settings in Extensions > DNSSEC:

    CONFIG_TEXT: This option is not supported.
    dc.jpg

Cause

Plesk DNSSEC extension bug #EXTDNSSEC-59, which will be fixed in one of the next extension updates.

Follow the article to be notified when the bug is fixed - the article will be updated.

Workaround

  1. Connect to the server via SSH

  2. Remove DNSSEC: Plesk > Extensions > My Extensions > DNSSEC > More > Remove
  3. Install DNSSEC extension again, do not open it: Plesk > Extensions
  4. Download a hotfix and unzip it

    # wget https://plesk.zendesk.com/hc/article_attachments/360005014439/dnssec-Config.zip

    # unzip dnssec-Config.zip

  5. Replace /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php with the unzipped one

    # cp /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php{,.backup}
    # cp ./Config.php  /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php

Comments

4 comments

Sort by Date Votes
  • Avatar
    Arif Calhan

    i have done what you here write but problem still exists :(

    0
    Comment actions Permalink
  • Avatar
    Anton Maslov

    @Arif

    I recommend to create a ticket then to figure out the reason.

    0
    Comment actions Permalink
  • Avatar
    Kirk Macdonald

    you need to uninstall the extension then reinstall it

    then before opening the extension copy the hotfix patch as suggested then open the dnssec extension and it works

    Just tested this patch and it is working for me BUT YOU HAVE TO UNISTALL THEN REINSTALL to clear the entries in the db

    0
    Comment actions Permalink
  • Avatar
    Ekaterina Babenko

    HI Kirk Macdonald,
    Thank you for your input. The article has already been updated with all steps required 

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles