Error issuing certificate

[ocayatte]

My domain is: http://eboutique0.pest8216.odns.fr/

I ran this command: issue certificate

It produced this output:

• Error issuing certificate
• Failed to issue certificate
• Updating challenge for www.eboutique0.pest8216.odns.fr: acme: error code 400 “urn:ietf:params:acme:error:dns”: DNS problem: SERVFAIL looking up CAA for odns.fr - the domain’s nameservers may be malfunctioning (order URL: https://acme-v02.api.letsencrypt.org/acme/order/57217137/2973955219)

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): cPanel / o2switch

[JuergenAuer]

Hi @ocayatte

@ocayatte

My domain is: http://eboutique0.pest8216.odns.fr/

checking your domain via eboutique0.pest8216.odns.fr - Make your website better - DNS, redirects, mixed content, certificates you see the problem.

The name servers of odns.fr are buggy:

X	Fatal error: Nameserver doesn't support TCP connection: ns1.o2switch.net: Refused
X	Fatal error: Nameserver doesn't support TCP connection: ns2.o2switch.net: Refused

Authoritative name servers must support TCP.

And:

Solution: Try to create a CAA entry with your subdomain name.

If such an entry exists, the check of odns.fr is skipped.

If this isn't possible (too old name server software), then you can't fix it.

[mnordhoff]

There isn't an odns.fr zone on your nameservers, so any queries for it fail.

(There is an pest8216.odns.fr zone, so that part of the tree will usually work.)

You need to fix your DNS configuration. Or, for Let's Encrypt's purposes, you can work around the issue:

@JuergenAuer

Solution: Try to create a CAA entry with your subdomain name.

If such an entry exists, the check of odns.fr is skipped.

[ocayatte]

Many thanks !

I created a CAA entry and issued the certificate.