Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: in.graphica.com.au
I ran this command: certbot certonly --dns-rfc2136 --debug-challenges
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator dns-rfc2136, Installer None
Please enter in your domain name(s) (comma and/or space separated) (Enter ‘c’
to cancel): *.in.graphica.com.au
Obtaining a new certificate
Performing the following challenges:
dns-01 challenge for in.graphica.com.au
Input the path to your RFC 2136 credentials INI file (Enter ‘c’ to cancel): /usr/local/etc/namedb/rfc2136.ini
AT THIS POINT certbot just hangs and never returns, so I have to CTL^ C to kill request.
In the log files there is no prior apparent errors that explain why it is hanging.
My web server is (include version): apache24
The operating system my web server runs on is (include version): FreeBSD 11.2
My hosting provider, if applicable, is: N/A
I can login to a root shell on my machine (yes or no, or I don’t know): Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No
The version of my client is (e.g. output of certbot --version
or certbot-auto --version
if you’re using Certbot): certbot 0.39.0
RESULT:
certbot just hangs and there is no evidence of DNS TXT challenge ocuring, here is trace back from the CTL^ C:
^CCleaning up challenges
^CExiting abnormally:
Traceback (most recent call last):
File “/usr/local/lib/python3.6/site-packages/certbot/auth_handler.py”, line 69, in handle_authorizations
resps = self.auth.perform(achalls)
File “/usr/local/lib/python3.6/site-packages/certbot/plugins/dns_common.py”, line 58, in perform
self._perform(domain, validation_domain_name, validation)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 76, in _perform
self._get_rfc2136_client().add_txt_record(validation_name, validation, self.ttl)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 112, in add_txt_record
domain = self._find_domain(record_name)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 186, in _find_domain
if self._query_soa(guess):
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 209, in _query_soa
response = dns.query.udp(request, self.server, port=self.port)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 325, in udp
q.keyring, q.mac, ignore_trailing)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 258, in receive_udp
_wait_for_readable(sock, expiration)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 156, in _wait_for_readable
_wait_for(s, True, False, True, expiration)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 131, in _wait_for
if not _polling_backend(fd, readable, writable, error, timeout):
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 92, in _poll_for
event_list = pollable.poll()
KeyboardInterrupt
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File “/usr/local/bin/certbot”, line 11, in
load_entry_point(‘certbot==0.39.0’, ‘console_scripts’, ‘certbot’)()
File “/usr/local/lib/python3.6/site-packages/certbot/main.py”, line 1378, in main
return config.func(config, plugins)
File “/usr/local/lib/python3.6/site-packages/certbot/main.py”, line 1265, in certonly
lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
File “/usr/local/lib/python3.6/site-packages/certbot/main.py”, line 121, in _get_and_save_cert
lineage = le_client.obtain_and_enroll_certificate(domains, certname)
File “/usr/local/lib/python3.6/site-packages/certbot/client.py”, line 405, in obtain_and_enroll_certificate
cert, chain, key, _ = self.obtain_certificate(domains)
File “/usr/local/lib/python3.6/site-packages/certbot/client.py”, line 348, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File “/usr/local/lib/python3.6/site-packages/certbot/client.py”, line 384, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
File “/usr/local/lib/python3.6/site-packages/certbot/auth_handler.py”, line 98, in handle_authorizations
return authzrs_validated
File “/usr/local/lib/python3.6/site-packages/certbot/error_handler.py”, line 105, in exit
self._call_registered()
File “/usr/local/lib/python3.6/site-packages/certbot/error_handler.py”, line 124, in _call_registered
self.funcs-1
File “/usr/local/lib/python3.6/site-packages/certbot/auth_handler.py”, line 220, in _cleanup_challenges
self.auth.cleanup(achalls)
File “/usr/local/lib/python3.6/site-packages/certbot/plugins/dns_common.py”, line 77, in cleanup
self._cleanup(domain, validation_domain_name, validation)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 79, in _cleanup
self._get_rfc2136_client().del_txt_record(validation_name, validation)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 147, in del_txt_record
domain = self._find_domain(record_name)
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 186, in _find_domain
if self._query_soa(guess):
File “/usr/local/lib/python3.6/site-packages/certbot_dns_rfc2136/dns_rfc2136.py”, line 209, in _query_soa
response = dns.query.udp(request, self.server, port=self.port)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 325, in udp
q.keyring, q.mac, ignore_trailing)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 258, in receive_udp
_wait_for_readable(sock, expiration)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 156, in _wait_for_readable
_wait_for(s, True, False, True, expiration)
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 131, in _wait_for
if not _polling_backend(fd, readable, writable, error, timeout):
File “/usr/local/lib/python3.6/site-packages/dns/query.py”, line 92, in _poll_for
event_list = pollable.poll()
KeyboardInterrupt