Cannot install Let's Encrypt: CAA SERVFAIL

[apocanow]

Hi.
I am trying to install Let’s Encrypt on beatgogo.ru .
I got this error:

---

Invalid response from https://acme-v01.api.letsencrypt.org/acme/authz/XUYup0xjw_4xJ7YshCEEdZBhjfX8zy6c-58UyG48cVg.
Details:
Type: urn:acme:error:connection
Status: 400
Detail: DNS problem: SERVFAIL looking up CAA for ru

This is because my domain register cannot set a CAA record.
Is there an alternate way to go forward?

Can you explain it, please?
Thank You

[sahsanu]

Hi @apocanow,

Seems a DNSSEC problem on TLD .ru

Take a look to this post LE is failing CAA on TLD

Cheers,
sahsanu

[apocanow]

Hi @sahsanu and thanks for the reply.

My domain registar said that they cannot set a CAA record. It can be a co-cause? I read that post and it seems a “temporary issue” of .ru domains. Am I wrong?

It also seems that I cannot do anything If not “wait”. Am I wrong?

Thanks
apocanow

[sahsanu]

@apocanow

My domain registar said that they cannot set a CAA record. It can be a co-cause?

No, there is no need to add a CAA record only that your DNS servers answer correctly saying ok, you are requesting a CAA record but I've no info, that is ok. I've checked your domain and it is not your fault.

@apocanow

I read that post and it seems a “temporary issue” of .ru domains. Am I wrong?

Yes, seems it is temporary.

@apocanow

It also seems that I cannot do anything If not “wait”. Am I wrong?

Correct, it is not your fault and you can do nothing to solve it... just wait.

Cheers,
sahsanu

[apocanow]

Thanks, @sahsanu. Very kind.

I appreciate the help you gave to me. I hope you can assist me if I have further problems.
In the while, I will wait.

Bye,
apocanow

[sahsanu]

@apocanow, other users are reporting they can issue certs for .ru domains again so maybe you could try to issue the cert for your domain.

Now, dnsviz reports no DNSSEC issues for .ru TLD

[apocanow]

Hi @sahsanu. Sorry for not updating. I tried some minutes ago, and it worked for me too. Thank you for everything