Getting DNS problem: SERVFAIL looking up

Help
1

Please fill out the fields below so we can help you better.

My domain is: line28.com

I ran this command: certbot --apache -d line28.com -d www.line28.com

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for line28.com
tls-sni-01 challenge for www.line28.com
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. line28.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A for line28.com, www.line28.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A for www.line28.com

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: line28.com
    Type: connection
    Detail: DNS problem: SERVFAIL looking up A for line28.com

    Domain: www.line28.com
    Type: connection
    Detail: DNS problem: SERVFAIL looking up A for www.line28.com

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

My web server is (include version):
Apache/2.4.18 (Ubuntu) server built: 2017-07-27T14:34:01

The operating system my web server runs on is (include version):
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.3 LTS"
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

2

Hi @Net4all,

This SERVFAIL error is because tou have not configured DNSSEC for your domain properly.

https://dnssectest.net/line28.com/A

To be able to issue a certificate you need to remove DNSSEC for your domain or better, fix the DNSSEC problems.

Good luck,
sahsanu

3

Thanks @sahsanu
True… I had DNSSEC while the DNS servers were at NameSecure but I moved the DNS server to Amazone Route 53 and there did not set the DNSSEC as it is not supported by then for no self registered domains.
I sent a mail to NameSecure to switch of the DNSSEC. I should be find when this will be done…
Thanks again,
Net4all

2 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.