Symptoms
- Cannot sign DNS zone in Subscriptions > example.com > DNSSEC extension > Sign the DNS with one of the following errors:
PLESK_ERROR: The algorithm <SELECTED-ALGORITHM> was marked as not allowed."
PLESK_ERROR: error: Execution CLI Utility is failed. dnsmng. dnsmng: Command line argument number 6 is unsafe dnsmng: Command line argument number 6 is unsafe
PLESK_ERROR: Error: Unable to sign the DNS zone. Execution CLI utility is failed: dnsmng. dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
System error 11: Resource temporarily unavailable dnsmng: /usr/sbin/dnssec-keygen failed with code 1.
Stderr:dnssec-keygen: fatal: unknown algorithm EC/AP256SHA256
System error 11: Resource temporarily unavailable - Unable to apply any settings in Extensions > DNSSEC:
CONFIG_TEXT: This option is not supported.
Cause
Plesk DNSSEC extension bug #EXTDNSSEC-59, which will be fixed in one of the next extension updates.
Workaround
-
Connect to the server via SSH
- Remove DNSSEC: Plesk > Extensions > My Extensions > DNSSEC > More > Remove
- Install DNSSEC extension again, do not open it: Plesk > Extensions
- Download a hotfix and unzip it
# wget https://plesk.zendesk.com/hc/article_attachments/360005014439/dnssec-Config.zip
# unzip dnssec-Config.zip
-
Replace
/usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php
with the unzipped one# cp /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php{,.backup}
# cp ./Config.php /usr/local/psa/admin/plib/modules/dnssec/library/Dnssec/Config.php
Comments
4 comments
i have done what you here write but problem still exists :(
@Arif
I recommend to create a ticket then to figure out the reason.
you need to uninstall the extension then reinstall it
then before opening the extension copy the hotfix patch as suggested then open the dnssec extension and it works
Just tested this patch and it is working for me BUT YOU HAVE TO UNISTALL THEN REINSTALL to clear the entries in the db
HI Kirk Macdonald,
Thank you for your input. The article has already been updated with all steps required
Please sign in to leave a comment.