Certbot doesn't get correct IP address

So i'm trying to get a certificate with certbot. My website is available from the internet (www.alces.info) and everything work well except the https of course. when i try to get the certificat with the command below, i get an output mentioning a wrong IP address, whatismyip is currently telling me: 174.93.180.140 but thats not what certbot output. in the no-ip portal, the DNS hostname A is to the correct ip address (like what whatismyip says)

Also i must say i'm unsure if i'm doing something wrong, should i request a certificate only for the www, or a wildcard like i tried in the command listed below?

currently the domain alone only go to nginx default page, i only setup the www virtual host

My domain is: alces.info

I ran this command: certbot --nginx -d alces.info --agree-tos

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Requesting a certificate for www.alces.info
Performing the following challenges:
http-01 challenge for www.alces.info
Waiting for verification...
Challenge failed for domain www.alces.info
http-01 challenge for www.alces.info

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: www.alces.info
Type: dns
Detail: DNS problem: looking up A for www.alces.info: DNSSEC: DNSKEY Missing: validation failure <www.alces.info. A IN>: No DNSKEY record from 204.16.254.53 for key alces.info. while building chain of trust; DNS problem: looking up AAAA for www.alces.info: DNSSEC: DNSKEY Missing: validation failure <www.alces.info. AAAA IN>: No DNSKEY record from 194.62.181.53 for key alces.info. while building chain of trust

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Cleaning up challenges
Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version): nginx 1.22.1

The operating system my web server runs on is (include version): debian 12

My hosting provider, if applicable, is: self hosted, no-ip.com domain provider

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.1.0

Your DNSSEC is broken, see:

There's a DS RR in the .info. TLD zone for your domain, but the corresponding DNSSEC RR is missing in the alces.info. zone.

Also:

does not correspond with

You might want to consider adding both hostnames in the certificate.

3 Likes

Several places from around the world show "Not found" for DNS lookup
see Permanent link to this check report
and also for HTTP access as well here Permanent link to this check report

1 Like