Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com ), so withholding your domain name here does not increase secrecy, but …

[image] trosen: Detail: DNS problem: looking up A for trosen.defman.no: DNSSEC: RRSIGs Missing; no valid AAAA records found for trosen.defman.no Hmm. Unboundtest agrees that it isn't getting the signatures , but DNSViz seems to see them. There's something odd going on but I don't know as I'll …

Ah! That's almost definitely it. The Unbound config is stripping the private IP from the response, which is why the DNSSEC is broken. This is one of the times that the error message is very misleading. You need a public IP in order to use HTTP-01 (and for the public to visit the site). If it's inte…

Asking my ISP to move me to a loopback where I would receive a public dhcp solved the problem

DNS problem: looking up A for trosen.defman.no: DNSSEC: RRSIGs Missing; no valid AAAA records found for trosen.defman.no

Help

rg305 May 7, 2024, 6:50pm 3

It seems the IP is within the block 100.64.0.0/10
[SHARED-ADDRESS-SPACE-RFC6598-IANA-RESERVED]
Let's Debug (letsdebug.net)

Topic		Replies	Views
Certbot : "DNS problem: looking up A for my_domain: DNSSEC: RRSIGs Missing; no valid AAAA records found for my_domain Help	4	817	July 26, 2024
Unable to renew after enabling dnssec Help	11	4951	May 3, 2020
DNS problem: SERVFAIL looking up A for mysite - the domain's nameservers may be malfunctioning (renew cert) Help	15	9407	October 1, 2020
Can't renew certificate. DNS problem: SERVFAIL looking up A for Help	4	2105	October 5, 2017
DNSSEC: RRSIGs Missing: validation failure Help	8	562	March 16, 2025

DNS problem: looking up A for trosen.defman.no: DNSSEC: RRSIGs Missing; no valid AAAA records found for trosen.defman.no

Related topics