Only one DS key comes back in query

[Anand Buddhdev]

On 16/05/2022 15:07, frank picabia wrote:

Hi Frank,

> I have dsset-example.com showing two DS keys with algorithm 8.
> I included both .key files in my DNS.  Only digest 1 comes back
> in a dig query.
> 
> I use dnssec-signzone tool to sign the zone file.
> 
> The domain registrar says there is a problem with the digest 2 value.
> It's copied directly from the dsset file.
> 
> Not sure about the chicken and the egg in this case.  When I do a dig, is
> it really
> just getting the value back from the domain registrar?
> 
> Any suggestions on how to ensure my digest 2 DS value is set up right?

We cannot help you if we cannot see the DS records or know which domain 
they are for.

Anand