I’m having trouble managing my DNSSEC with namecheap domain “sebulba.top” dns key doesn’t match ds record. Can you help me?
Hi,
i second this question. I also just switched my domain to desec and have the same error on my domain.
Greetings
CPUMiner
Hi sebulba, CPUMiner,
Thank you for your messages, and welcome to deSEC!
@CPUMiner: It looks like your domain has an inconsistent DNSSEC configuration (at your registrar): The DS records configured via your registrar are different from the ones we provided (see the instructions by clicking the (i) button next to your domain name in our web interface). You will need to update the DS information at your registrar with the information provided by us.
@sebulba, you seem to already have done this, and your problem has disappeared?
Stay secure,
Peter
Hm, yeah, it seems this way. I used the alternative dnssec checker tool from hasiatthegrill.net | DNSViz.
There in the diagramm i can see that apparently the .net tld points to a different dnskey id instead of what I provided them via email (yep, i copy&pasted the information from the (i) button in the domain list.
I have now sent a second email to my domain registrar to please check the provided dnssec information.
@peter and all other who searches for this problem.
Yay, your suspicion was the right one. Registrar set the information again and now everything works.
Thanks
CPUMiner
@peter , to confirm, it was indeed a random problem on the registrar side. I’ve just reached their support for three times and finally they have reset my dnssec settings, so I could put a new key.
Just to confirm for every body else, who will face such a problem: “None of DNSKEY records could be validated by any of the D’s records” is likely caused by registrar random problems.