Failure because of not resolving, without an apparent reason

Help
1

Hi.
I’m for Wix.com and usually we have another guy that contacts you, but he is on vacation.
i’m having trouble issuing a certificate to domain faragjanitorial.com.
the error i am getting is: "Can’t obtain certificate: Not resolving to Wix; CNAMEs: []; IPs: [72.5.65.111]"
this is surprising, because when i run dig command on the domain, i get the Wix CNAME www193.wixdns.net, and the A records are also Wix’s (23.236.62.147). i’m not sure where does the IP from the error is arriving from.

can you please try to assist?
Thanks

2

hi @idancohen

You will need to contact your guy and get him to give you a bit more information for example what client he uses what challenge he uses

It’s a bit ambitious asking people to help with limited information.

Andrei

3

we’re using the go client (lego, AFAIK) and we do SSL challlenge

4

Hi @idancohen,

Looking at the server logs I don't see any requests to either the staging environment or the production environment for the past 7 days that include this domain. It seems like something internal to Wix or the Lego client are doing a precheck and not actually talking to Let's Encrypt about these domains. I suspect there isn't much that we will be able to do to help you in this case.

5

You might also want to look at www.faragjanitorial.com vs. faragjanitorial.com. Right now I see the latter pointing at the Wix names that you refer to, while the former is pointing via a chain of CNAMEs at some Amazon ELB IP addresses, which are different from the Wix address. Possibly your software is trying to get a certificate that covers both, but the two forms of the name are currently pointed at different IP addresses, so depending on the validation method that you’re using, the validation might in fact not succeed.

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.