Cert status resolver error in nginx logs

Try:
dig A r3.o.lencr.org @209.222.18.222 +short
dig A r3.o.lencr.org @209.222.18.218 +short
dig A r3.o.lencr.org @8.8.8.8 +short

3 Likes
dig A r3.o.lencr.org @209.222.18.222 +short

; <<>> DiG 9.16.1-Ubuntu <<>> A r3.o.lencr.org @209.222.18.222 +short
;; global options: +cmd
;; connection timed out; no servers could be reached
dig A r3.o.lencr.org @209.222.18.218 +short

; <<>> DiG 9.16.1-Ubuntu <<>> A r3.o.lencr.org @209.222.18.218 +short
;; global options: +cmd
;; connection timed out; no servers could be reached
dig A r3.o.lencr.org @8.8.8.8 +short
o.lencr.edgesuite.net.
a1887.dscq.akamai.net.
23.46.239.8
23.46.239.18
23.46.239.19
23.46.238.248

Where do those 209.222.18.222 and 209.222.18.218 come from, besides the fact it seems to be configured on your system? It seems to be down entirely.

1 Like
Name:    resolver1.privateinternetaccess.com
Address: 209.222.18.222

Name:    resolver2.privateinternetaccess.com
Address: 209.222.18.218

I guess "private" means private.

2 Likes

Veeeeeeeeeery private, even not accessible for OP :crazy_face:

3 Likes

I changed those addresses, and now I can't ssh into my vps, and even with the web console, the system seems not to be booting :confused:

Changed them to what?
And how?

2 Likes

I followed method 1 from here: Change DNS server in Ubuntu Command Line

I set them to some opendns addresses

I do not see how a, perhaps, not fully functioning DNS server would lock a user out of their VPS/webconsole/et cetera. The system should boot just fine. There probably is more to it than just a DNS server.

3 Likes

Yeah, idk what's going on. I was able to login finally, but while trying to install updates, the machine just rebooted. Still couldn't ssh in. Going to restore a backup.

Ok, I am back to where I started, and more confused than ever. Could one of you guide me through this so I don't break my server again?

Method #1 seems to ask you to install something.
I don't think you need to install anything, you just need to edit the file /etc/resolv.conf
[hopefully it won't be reset on reboot]

2 Likes

I am pretty sure that file is overwritten on reboot.

In some systems that happens.
Show:
cat /etc/resolv.conf

If so, it would have something like:
# This file is managed by man:systemd-resolved(8). Do not edit.

2 Likes

I need to look into some stuff I guess. My system has some customization where certain applications (bittorrent) are bound to a vpn interface (private internet access), and I guess that's where those dns addresses came from. I don't know why they are interfering with other connections, but hopefully I can figure it out. I appreciate your help.

1 Like
sudo cat /etc/resolv.conf 
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
# 127.0.0.53 is the systemd-resolved stub resolver.
# run "systemd-resolve --status" to see details about the actual nameservers.

nameserver 209.222.18.222
nameserver 209.222.18.218
nameserver 8.8.8.8
nameserver 209.222.18.222
nameserver 209.222.18.218
nameserver 8.8.8.8

Oh well.
I still think you shouldn't have to install anything to make a permanent change.

2 Likes

Show:
find / -name *networking.cfg

2 Likes

It takes a long time to return results, and I didn't even let it finish I guess.

find / -name *networking.cfg
find: ‘/dev/shm/multipath’: Permission denied
find: ‘/var/spool/cron/atjobs’: Permission denied
find: ‘/var/spool/cron/atspool’: Permission denied
find: ‘/var/spool/cron/crontabs’: Permission denied
find: ‘/var/spool/rsyslog’: Permission denied
find: ‘/var/cache/ldconfig’: Permission denied
find: ‘/var/cache/private’: Permission denied
find: ‘/var/cache/apt/archives/partial’: Permission denied
find: ‘/var/cache/jellyfin’: Permission denied
find: ‘/var/cache/pollinate’: Permission denied
find: ‘/var/cache/apparmor/bef1d0ee.0’: Permission denied
find: ‘/var/cache/apparmor/26b63962.0’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-systemd-timesyncd.service-Euwvch’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-openvpn@openvpn.service-FYD0Ye’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-vnstat.service-sxbkai’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-ModemManager.service-LKza0e’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-systemd-resolved.service-Bh0lgj’: Permission denied
find: ‘/var/tmp/systemd-private-6792127cc2ea4453a7e168f83b35190b-systemd-logind.service-bMdLhj’: Permission denied
find: ‘/var/log/unattended-upgrades’: Permission denied
find: ‘/var/log/private’: Permission denied
find: ‘/var/log/jellyfin’: Permission denied
find: ‘/var/lib/nginx/fastcgi’: Permission denied
find: ‘/var/lib/nginx/body’: Permission denied
find: ‘/var/lib/nginx/scgi’: Permission denied
find: ‘/var/lib/nginx/proxy’: Permission denied
find: ‘/var/lib/nginx/uwsgi’: Permission denied
find: ‘/var/lib/fwupd/gnupg’: Permission denied
find: ‘/var/lib/private’: Permission denied
find: ‘/var/lib/apt/lists/partial’: Permission denied
find: ‘/var/lib/udisks2’: Permission denied
find: ‘/var/lib/polkit-1’: Permission denied
find: ‘/var/lib/ubuntu-advantage/private’: Permission denied
find: ‘/var/lib/update-notifier/package-data-downloads/partial’: Permission denied
find: ‘/var/lib/jellyfin’: Permission denied
find: ‘/var/lib/php/sessions’: Permission denied
find: ‘/sys/kernel/tracing’: Permission denied
find: ‘/sys/kernel/debug’: Permission denied
find: ‘/sys/fs/pstore’: Permission denied
find: ‘/sys/fs/bpf’: Permission denied
find: ‘/etc/nginx/ssl’: Permission denied
find: ‘/etc/multipath’: Permission denied
find: ‘/etc/sudoers.d’: Permission denied
find: ‘/etc/ssl/private’: Permission denied
find: ‘/etc/polkit-1/localauthority’: Permission denied
find: ‘/etc/swizzin/scripts’: Permission denied
find: ‘/etc/swizzin/sources’: Permission denied
find: ‘/etc/jellyfin’: Permission denied
^C

Ok, let's "help" it a little:
sudo find /etc -name *networking.cfg

[f your "disk" is on an SD card.... then I can see this taking forever]

2 Likes