On 31/08/2021 11:49, mj wrote:
Hi MJ,
Now the question. In most (if not all?) docs we read
on the subject, the
DS key looks something like:
knot-dns.cz. 3600 IN DS 54959 13
2
268DE6EB7E0630953B8AF0F0037BF68FD10443BF01B5E17805AF94C2 6921897D
or
dnssec-tools.org. 21600 IN DS 9638 13
2
92551AA25C4ADE8E2882FBF4BEB5B54F9D84379B153848852B68BB3C 793F4B0B
note the spaces at the end of the key string.
On the wire, there are no spaces in the DS rdata. These spaces are
printed by the "dig" utility, supposedly for better readability. Other
tools, such as "drill" do not display any spaces.
When you submit your DS record, don't put any spaces. And even if you
do, the web form or the backend that processes the DS record will strip
all the spaces.
Regards,
Anand