DNS problem: SERVFAIL looking up A for


#1

Hello,

My domain is:
thedancingaccountant.fanuriotimetracking.com

I ran this command:
sudo letsencrypt renew --dry-run --agree-tos

It produced this output:
Processing /etc/letsencrypt/renewal/thedancingaccountant.fanuriotimetracking.com.conf
2018-07-30 14:55:03,046:WARNING:letsencrypt.cli:Attempting to renew cert from /etc/letsencrypt/renewal/thedancingaccountant.fanuriotimetracking.com.conf produced an unexpected error: Failed authorization procedure. thedancingaccountant.fanuriotimetracking.com (http-01): urn:acme:error:dns :: DNS problem: SERVFAIL looking up A for thedancingaccountant.fanuriotimetracking.com. Skipping.
** DRY RUN: simulating ‘letsencrypt renew’ close to cert expiry
** (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/thedancingaccountant.fanuriotimetracking.com/fullchain.pem (failure)
** DRY RUN: simulating ‘letsencrypt renew’ close to cert expiry
** (The test certificates above have not been saved.)
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

My web server is (include version):
nginx/1.10.3 (Ubuntu)

The operating system my web server runs on is (include version):
Ubuntu 16.04.5 LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no


#2

Hi @nicolae.cismaru

I don’t get a dns-problem. But I see a timeout - http://thedancingaccountant.fanuriotimetracking.com/ doesn’t work. So http-01 - challenge can’t work.


#3

That’s because nginx is running and it is configured to use only https. Try https://thedancingaccountant.fanuriotimetracking.com/.

In order to renew the certificate, I stopped nginx and ran the above command.


#4

I had similar issues today, trying to obtain new certificates.
Example:

Detail: DNS problem: query timed out looking up A for vw.tizziautomobili.it
Detail: DNS problem: query timed out looking up A for vw.soverini-auto.it
Detail: DNS problem: query timed out looking up A for vw.giustozziterni.it
Detail: DNS problem: query timed out looking up A for vw.gabellini.it
Detail: DNS problem: query timed out looking up A for vw.eurocaritalia.it
Detail: DNS problem: query timed out looking up A for vw.reggini.it

But they are correctly configured and reachable…


#5

@xplants @nicolae.cismaru Are you still experiencing SERVFAIL responses and DNS timeouts you’re not able to reproduce?


#6

no more issues, sorry for the dealy


#7

Not anymore. Sorry for the late reply.


#8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.