Cannot install Let's Encrypt: CAA SERVFAIL

Help
1

Hi.
I am trying to install Let’s Encrypt on beatgogo.ru .
I got this error:

Invalid response from https://acme-v01.api.letsencrypt.org/acme/authz/XUYup0xjw_4xJ7YshCEEdZBhjfX8zy6c-58UyG48cVg.
Details:
Type: urn:acme:error:connection
Status: 400
Detail: DNS problem: SERVFAIL looking up CAA for ru

This is because my domain register cannot set a CAA record.
Is there an alternate way to go forward?

Can you explain it, please?
Thank You

2

Hi @apocanow,

Seems a DNSSEC problem on TLD .ru

Take a look to this post LE is failing CAA on TLD

Cheers,
sahsanu

3

Hi @sahsanu and thanks for the reply.

My domain registar said that they cannot set a CAA record. It can be a co-cause? I read that post and it seems a “temporary issue” of .ru domains. Am I wrong?

It also seems that I cannot do anything If not “wait”. Am I wrong?

Thanks
apocanow

4

No, there is no need to add a CAA record only that your DNS servers answer correctly saying ok, you are requesting a CAA record but I've no info, that is ok. I've checked your domain and it is not your fault.

Yes, seems it is temporary.

Correct, it is not your fault and you can do nothing to solve it... just wait.

Cheers,
sahsanu

1 Like
5

Thanks, @sahsanu. Very kind.

I appreciate the help you gave to me. I hope you can assist me if I have further problems.
In the while, I will wait.

Bye,
apocanow

1 Like
6

@apocanow, other users are reporting they can issue certs for .ru domains again so maybe you could try to issue the cert for your domain.

Now, dnsviz reports no DNSSEC issues for .ru TLD

net-2017-11-03-13-43-37
screenshot-dnsviz.net-2017-11-03-13-43-37.png851×929 57.1 KB

1 Like
7

Hi @sahsanu. Sorry for not updating. I tried some minutes ago, and it worked for me too. Thank you for everything :slight_smile:

1 Like
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.