By using AWS re:Post, you agree to the Terms of Use

Not working DNSSEC on hosted zones

0

I create DS record with the route 53 keys data in Domain register .cl, its works and validate the keys, but when i test DNSSEC for the hosted zones in route 53, i recieve No DS records found for norcomsys.cl in the cl zone, the register are insecure?

2 Answers
0

According to DNSVIZ (https://dnsviz.net/d/norcomsys.cl/dnssec/), DNSSEC is enabled and working correctly for norcomsys.cl

The .cl TLD is returning DS record for norcomsys.cl

$ dig norcomsys.cl @cl2-tld.d-zone.ca DS +short
9037 13 2 8F772DDB3DC7AABFE4094D0F9110E39EBED14778953F59321F6D82C8 D58B5728

Google DNS which performs DNSSEC validation, is returning RRSIG when resolving norcomsys.cl

$ dig norcomsys.cl @8.8.8.8 +dnssec +short
186.67.10.50
A 13 2 300 20220603091147 20220603070647 62283 norcomsys.cl. K6yz3hyKboDYYr9METvaSS0nJd2kld4OqGh9wRNosar2qwM+e4BeC8Ml lJjhFVJZO/FLam8JF0/Q73VJ/cgLAg==

How are you checking for DS record for norcomsys.cl?

answered 2 months ago
0

There was a problems with nic.cl, its take some time to update and validate the DS record, when they validate the DS record, the problems was resolve.

answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions