mirror of
https://github.com/nsupdate-info/nsupdate.info.git
synced 2026-04-25 08:35:56 +03:00
[GH-ISSUE #331] Failed to renew let's encrypt certificate: SERVFAIL looking up CAA #260
Labels
No labels
bug
bug
duplicate
easy
easy
enhancement
enhancement
invalid
needs help
pull-request
scalability
security
task
urgent
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nsupdate.info-nsupdate-info#260
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @githubtefo on GitHub (Mar 26, 2018).
Original GitHub issue: https://github.com/nsupdate-info/nsupdate.info/issues/331
My domain is: https://mydomain.awsmppl.com
I ran this command to renew my certificate:
certbot renew
or
certbot certonly --webroot -w /var/lib/letsencrypt/ -d mydomain.awsmppl.com (ArchWiki)
It produced this output:
My web server is (include version): Apache
The operating system my web server runs on is (include version): Archlinux 32bits
My hosting provider, if applicable, is: self-hosted
I can login to a root shell on my machine (yes or no, or I don’t know): yes
Thank you!
My certificate will expire in 7 days and I really need my server for my work.
Might be related with the DNSSEC config?
reference issue: https://community.letsencrypt.org/t/renew-failed-servfail-looking-up-caa/57681
@ThomasWaldmann commented on GitHub (Mar 26, 2018):
Note: I have notified the dns zone admin about this.
@AgentTNT commented on GitHub (Mar 26, 2018):
The zone has been rectified and the underlying issue that caused the invalid NSEC should be fixed as well. Additional monitoring has been added.
@githubtefo commented on GitHub (Mar 26, 2018):
Thanks so much.
I will try again tonight and I will let you know.
Whank you again!
@githubtefo commented on GitHub (Mar 27, 2018):
Succeeded!
@pharpe commented on GitHub (Jun 11, 2018):
I'm having this exact same issue.
Running this command:
./certbot-auto certonly --standalone --standalone-supported-challenges http-01 --email myemail@gmail.com -d mydomain.awsmppl.com
Result:
Failed authorization procedure. mydomain.awsmppl.com (http-01): urn:acme:error:dns :: DNS problem: SERVFAIL looking up CAA for mydomain.awsmppl.com
IMPORTANT NOTES:
The following errors were reported by the server:
Domain: mydomain.awsmppl.com
Type: None
Detail: DNS problem: SERVFAIL looking up CAA for mydomain.awsmppl.com
@githubtefo commented on GitHub (Jun 11, 2018):
In my case the issue disappeared. Moreover, the cron job worked great this month.
@githubtefo commented on GitHub (Aug 21, 2018):
Same problem again!
Thanks for your help.-
@AgentTNT commented on GitHub (Aug 21, 2018):
May you try again now?
@githubtefo commented on GitHub (Aug 21, 2018):
Now it works!
Great, thank you so much.
@githubtefo commented on GitHub (Jan 17, 2020):
Hi everyone,
@ThomasWaldmann, @TheGr8Wonder, could you please double check/notify the dns zone admin about this again? It is not working and my certificate has expired yesterday :(
Thank you very much in advance!
@githubtefo commented on GitHub (Jan 25, 2020):
Hi guys,
Any updates with this issue? I really appreciate your help to get my server up and running again.
Thank you!
@ThomasWaldmann commented on GitHub (Jan 26, 2020):
@TheGr8Wonder ^^^
@githubtefo commented on GitHub (Feb 4, 2020):
@TheGr8Wonder rectified the zone and the issue was solved!
I could renew my certificate now and the server is up and running again.
I really appreciate your help.
Thank y'all!