diff --git a/management/status_checks.py b/management/status_checks.py index 67b269742..c1ee590e6 100755 --- a/management/status_checks.py +++ b/management/status_checks.py @@ -625,7 +625,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False): return output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently - make a change, you must resolve this immediately (see below).""") + make a change (and are not using this box for DNS aka external DNS), you must resolve this immediately (see below).""") output.print_line("""Follow the instructions provided by your domain name registrar to set a DS record. Registrars support different sorts of DS records. Use the first option that works:""") @@ -652,7 +652,8 @@ def preferred_ds_order_func(ds_suggestion): output.print_line(ds_suggestion['record'], monospace=True) if len(ds) > 0: output.print_line("") - output.print_line("The DS record is currently set to:") + output.print_line("The above DS record is not relevant when using external DNS. The DS record is currently set to:") + output.print_line("") for rr in ds: output.print_line("Key Tag: {0}, Algorithm: {1}, Digest Type: {2}, Digest: {3}".format(*rr))