DNS problem: NXDOMAIN looking up A

My domain is: desbiens-desmeules.com

I ran this command: $ sudo certbot --apache

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Plugins selected: Authenticator apache, Installer apache

Which names would you like to activate HTTPS for?

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

...

3: desbiens-demeules.com

4: www.desbiens-demeules.com

..

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Select the appropriate numbers separated by commas and/or spaces, or leave input

blank to select all options shown (Enter 'c' to cancel): 3 4

Obtaining a new certificate

Performing the following challenges:

http-01 challenge for desbiens-demeules.com

http-01 challenge for www.desbiens-demeules.com

Waiting for verification...

Cleaning up challenges

Failed authorization procedure. desbiens-demeules.com (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for desbiens-demeules.com - check that a DNS record exists for this domain, www.desbiens-demeules.com (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.desbiens-demeules.com - check that a DNS record exists for this domain

**IMPORTANT NOTES:**

- The following errors were reported by the server:

Domain: desbiens-demeules.com

Type: None

Detail: DNS problem: NXDOMAIN looking up A for

desbiens-demeules.com - check that a DNS record exists for this

domain

Domain: www.desbiens-demeules.com

Type: None

Detail: DNS problem: NXDOMAIN looking up A for

www.desbiens-demeules.com - check that a DNS record exists for this

domain

My web server is (include version): Apache/2.4.38 (Debian)

The operating system my web server runs on is (include version):

Distributor ID: Debian
Description: Debian GNU/Linux 10 (buster)
Release: 10
Codename: buster

My hosting provider, if applicable, is: Own VPS

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.31.0

Here's what I've tried:

  1. DNS records

@ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1587317265 10800 3600 604800 10800
@ 10800 IN A 199.58.81.174
@ 10800 IN MX 10 spool.mail.gandi.net.
@ 10800 IN MX 50 fb.mail.gandi.net.
blog 10800 IN CNAME blogs.vip.gandi.net.
imap 10800 IN CNAME access.mail.gandi.net.
pop 10800 IN CNAME access.mail.gandi.net.
smtp 10800 IN CNAME relay.mail.gandi.net.
webmail 10800 IN CNAME webmail.gandi.net.
www 3600 IN CNAME desbiens-demeules.com.

  1. Firewall
    sudo ufw allow 443

  2. Tested default-ssl.conf

  3. Verify DNS
    https://check-your-website.server-daten.de/?q=desbiens-desmeules.com
    https://letsdebug.net/desbiens-desmeules.com/373115

Many thanks for your help! :smiley:

1 Like

Your Apache is configured for desbiens-demeules.com and not for desbiens-desmeules.com.

Please correct your Apache configuration to reflect the correct domain name and try again.

Also, your www subdomain CNAME in the zone file points to the incorrect hostname in your information above, while it is actually pointing to the correct hostname in the actual DNS zone file. Another typo?

3 Likes

Seriously oh goodness. Thanks for the second eyes. I saw all the other typo errors on the forum and thought I had totally verified! Working now, many thanks!

5 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.