A Record Non-Existent(Authentication:Nginx)

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: instructorcodethenet.net

I ran this command:

It produced this output: sudo certbot --nginx -d codethenet.ddns.net -d www.codethenet.ddns.net -v

My web server is (include version): Linux 24.04.2 LTS

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 2.9.0

Certbot gives an error saying my domain A and AAAA records are nonexistent. I don't want to implement IPv6 as it's not necessary for my setup. The specific error is: "Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: Domain: instructorcodethenet.net Type: dns Detail: DNS problem: NXDOMAIN looking up A for instructorcodethenet.net - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for instructorcodethenet.net - check that a DNS record exists for this domain Domain: www.instructorcodethenet.net Type: dns Detail: DNS problem: NXDOMAIN looking up A for www.instructorcodethenet.net - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.instructorcodethenet.net - check that a DNS record exists for this domain "

Config file: Zone

GNU nano 7.2 db.instructorcodethenet.net 1 $TTL 86400 2 $ORIGIN codethenet.ddns.net. 3 4 @ IN SOA codethenet.ddns.net. admin.instructorcodethenet.net. ( 5 6 2 7 3600 8 1800 9 604800 10 86400 11 12 ) 13 14 @ IN NS ns1.instructorcodethenet.net. 15 16 @ IN A 192.168.8.14 17 ns1 IN A 192.168.8.14 18 www IN A 192.168.8.14 19

Config File: Authoritative Name Server

GNU nano 7.2 named.conf.local 1 // 2 // Do any local configuration here 3 // 4 5 // Consider adding the 1918 zones here, if they are not used in your 6 // organization 7 //include "/etc/bind/zones.rfc1918"; 8 9 zone "instructorcodethenet.net" { 10 type master; 11 file "/etc/bind/zones/db.instructorcodethenet.net"; 12 13 }; 14 15 zone "8.168.192.in-addr.arpa" { 16 type master; 17 file "/etc/bind/zones/db.192.168.8"; 18 19 }; 20

Config File: PTR Record

U nano 7.2 db.192.168.8 1 ; BIND9 Reverse Zone for 192.0.2.0/24 2 $TTL 86400 3 $ORIGIN 8.168.192.in-addr.arpa. ; Reverse notation for 192.168.8.x 4 5 @ IN SOA ns1.instructorcodethenet.net. admin.instructorcodethenet.net. ( 6 3 ; Serial 7 3600 ; Refresh 8 1800 ; Retry 9 604800 ; Expire 10 86400 ; Minimum TTL 11 ) 12 13 ; Nameservers 14 @ IN NS ns1.instructorcodethenet.net. 15 16 ; PTR Records (IPv4) 17 14 IN PTR www.instructorcodethenet.net. 18 14 IN PTR ns1.instructorcodethenet.net. 19

Research indicates that I need to have my domain registered, however i'm labbing to see if there's a possibility for me to certify my domain with no expense.

Just to correct myself I had changed my DNS back to its original settings within the zone file

Hi. Doesn't look like your domain is registered. Or perhaps there's a typo?

$ whois instructorcodethenet.net
No match for domain "INSTRUCTORCODETHENET.NET".
[…]

$ rdap instructorcodethenet.net
# Error: RDAP server returned 404, object does not exist.

Public CAs (like LE) only ever issue certificates for public domain names.

Edit: I skimmed through your last sentence… There was no typo then :slightly_smiling_face:

Yes, of course. Publicly trusted CAs need to verify the hostname, otherwise I could get a certificate for fbi.gov or p..nhub.com without a problem and stage a Machine in the Middle-attack on networks I can get to.

1 Like

Alhumdilillah, you two made a lot of sense. I thank Allah for fielding my invocation.

Alhumdilillah, you two made a lot of sense. I thank Allah for fielding my invocation..