DNSSEC, Adding DS record to registrar, 'Digest type invalid'

[kamabu1971]

Hi Cloudflare Community,

Maybe you are able to help me (didn’t find any post that answered my issue, at least that what I think;-)!):

After activating DNSSEC within Cloudflare (I registered the domain with Cloudflare) and then trying to add the DS record to the registrar (join.law/101domain ) the following message is displayed: Digest Type is invalid, even though I am using the digest type 2 (SHA256) provided by Cloudflare, and all the other required infp is exactly the same as provided by Cloudflare. Contacted the registrar as well but haven’t receievd any answer yet.

Many thanks,
Kalle

[Damian]

Hi there,

I look had a look at the RFC for SHA256 in DNSSEC and that is the digest type 2 - RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)

I had a quick look at 101domain’s DNSSEC documentation and this is what I found - Adding DNSSEC to Your Domain

And this is what our dashboard looks like:

Digest Type, you need to put ‘2’ in 101domains and that will mean SHA256 on their end.

Hope this helps!

[kamabu1971]

Hi Damian,

Many thanks. Worked perfectly fine. Thanks for your prompt and very helpful and clear support.

Much appreciated.

Best,
Kalle