Getting DNS problem: SERVFAIL looking up

[Net4all]

Please fill out the fields below so we can help you better.

My domain is: line28.com

I ran this command: certbot --apache -d line28.com -d www.line28.com

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for line28.com
tls-sni-01 challenge for www.line28.com
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. line28.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A for line28.com, www.line28.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A for www.line28.com

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: line28.com
  Type: connection
  Detail: DNS problem: SERVFAIL looking up A for line28.com

  Domain: www.line28.com
  Type: connection
  Detail: DNS problem: SERVFAIL looking up A for www.line28.com

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address. Additionally, please check that
  your computer has a publicly routable IP address and that no
  firewalls are preventing the server from communicating with the
  client. If you’re using the webroot plugin, you should also verify
  that you are serving files from the webroot path you provided.

My web server is (include version):
Apache/2.4.18 (Ubuntu) server built: 2017-07-27T14:34:01

The operating system my web server runs on is (include version):
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.3 LTS"
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

[sahsanu]

Hi @Net4all,

@Net4all

DNS problem: SERVFAIL looking up A for line28.com,

This SERVFAIL error is because tou have not configured DNSSEC for your domain properly.

DNSSEC Analyzer - line28.com

https://dnssectest.net/line28.com/A

To be able to issue a certificate you need to remove DNSSEC for your domain or better, fix the DNSSEC problems.

Good luck,
sahsanu

[Net4all]

Thanks @sahsanu
True… I had DNSSEC while the DNS servers were at NameSecure but I moved the DNS server to Amazone Route 53 and there did not set the DNSSEC as it is not supported by then for no self registered domains.
I sent a mail to NameSecure to switch of the DNSSEC. I should be find when this will be done…
Thanks again,
Net4all