I’m using https://github.com/srvrco/getssl
When I run it for getting certificate for my site, it outputs “DNS problem” error (I think it is response from letsencrypt). I have DNS A record for that domain with the right IP address. Maybe i should change something or something is missing?
We’re going to need more information than you’re providing to assist with this. Perhaps you could fill out the starter questions presented when you created this topic? They’re provided as guidelines for what sort of information is necessary to troubleshoot most issues.
In particular, knowing your domain and what command you ran would be a pretty base requirement to assist, especially with DNS issues.
Can you provide the exact output of that command?
wearebrighter.com: no certificate obtained from host
Verify each domain
copying challenge token to %PATH_TO_THE_TOKEN_(I_WON’T_LEAVE_IT_HERE)%
getssl: wearebrighter.com:Verify error: "DNS problem
That domain’s using Namebright DNS, and it looks like they haven’t fixed their
CAA problems (or their other problems).
Without the full error message it’s hard to be sure, but that’s likely the problem…
It’s almost certainly the CAA issue. I just tested and the authoritative nameservers respond to CAA requests with NOTIMP, which I believe is a failure condition for certificate authorization purposes.
@artem.komarov, you should lodge a support issue with your DNS provider and ask them to properly respond to CAA record queries. They will need to get this resolved soon in order to comply with the CA/Browser Forum deadline of September 8th for CAA record checking being mandatory.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.