DNSSEC stuck at pending

[user11738]

Hey Everyone,

I recently migrated my domain registrar from DNS Simple to Cloudflare. The domain I’m having trouble with is endrpi.io. I believe I forgot to disable DNSSEC on DNS Simple before the transfer. From the Cloudflare docs, the recommendation is to enable DNSSEC on Cloudflare once the domain has transferred.

I enabled DNSSEC on the DNS page for endrpi.io as soon as the transfer completed and it gave the following message for a few days:

“DNSSEC is pending while we automatically add the DS record on your domain.”

After a few days I created a support ticket to look into what’s going on. Cloudflare support recommended that I cancel DNSSEC and reenable it from the Manage Domains page which I did on November 17th. It still says the same pending message. I added a few comments to the support ticket but I haven’t heard back and the domain still isn’t resolving.

Is there anything else I can do here? Any DNS settings to change? I’d really like to get this resolved ASAP.

Thanks for any insight,

John

[fritex]

@user11738

I believe I forgot to disable DNSSEC on DNS Simple before the transfer

Yep, this one could be a reason why this issue is appearing.

Have you tried flusing the DNSKEY and the DS type of DNS records for your endrpi.io domain name using below tool?:

• 1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

@user11738

Cloudflare support

@user11738

ticket

@user11738

I added a few comments to the support ticket but I haven’t heard back and the domain still isn’t resolving

Kindly, may I ask you to post your ticket number here in your next reply?

[user11738]

Hi @fritex

Sure thing, here you go: https://support.cloudflare.com/hc/requests/2306000

Thanks,

John

[user11738]

@MoreHelp Can anyone look at this please?

[sdayman]

Fritex already escalated it, but we’re having trouble getting someone from Support to look at it. Maybe @cloonan can get someone’s attention.

[user11738]

@sdaymanI’m on day 16 of a complete website outage. Can someone just delete the DS record?

[Deimos_Col]

Hello, I experience the same problem; It was only resolved by canceling DNSSEC in the Cloudflare panel and asking the domain provider to remove the request to the registrar, I recommend doing the same, to make the domain work.

[user11738]

Update: Cloudflare tech support had to delete the old DS record for the new DNSSEC to take. It seems only Cloudflare can make this change.

[sdayman]

@user11738

It seems only Cloudflare can make this change.

Correct. The domain registrar controls the DS record at the registry. I’m sorry it took so long to resolve this, but hopefully you’re back up and running again without any further issues.

[user11738]

@sdayman thank you. I’m back up and running again!