Lego throws up an error of no valid A records found for kcssoft.org

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kcssoft.org

I ran this command:
sudo /home/kcsadmin/redmine-4/letsencrypt/lego --http --email="[redacted]@kcssoft.net" --domains="kcssoft.org" --domains="mail.kcssoft.org" --path="/home/kcsadmin/redmine-4/letsencrypt" renew --days 90

It produced this output:
uthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/129470364806
2022/07/12 00:41:28 [INFO] [mail.kcssoft.org] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/129470364816
2022/07/12 00:41:28 [INFO] [kcssoft.org] acme: Could not find solver for: tls-alpn-01
2022/07/12 00:41:28 [INFO] [kcssoft.org] acme: use http-01 solver
2022/07/12 00:41:28 [INFO] [mail.kcssoft.org] acme: Could not find solver for: tls-alpn-01
2022/07/12 00:41:28 [INFO] [mail.kcssoft.org] acme: use http-01 solver
2022/07/12 00:41:28 [INFO] [kcssoft.org] acme: Trying to solve HTTP-01
2022/07/12 00:41:33 [INFO] [mail.kcssoft.org] acme: Trying to solve HTTP-01
2022/07/12 00:41:34 [INFO] [mail.kcssoft.org] Served key authentication
2022/07/12 00:41:34 [INFO] [mail.kcssoft.org] Served key authentication
2022/07/12 00:41:34 [INFO] [mail.kcssoft.org] Served key authentication
2022/07/12 00:41:35 [INFO] [mail.kcssoft.org] Served key authentication
2022/07/12 00:41:40 [INFO] [mail.kcssoft.org] The server validated our request
2022/07/12 00:41:41 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/129470364806
2022/07/12 00:41:41 [INFO] Skipping deactivating of valid auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/129470364816
2022/07/12 00:41:41 Could not obtain certificates:
acme: Error -> One or more domains had a problem:
[kcssoft.org] acme: error: 400 :: urn:ietf:params:acme:error:dns :: no valid A records found for kcssoft.org; no valid AAAA records found for kcssoft.org, url:

My web server is (include version): apache2

The operating system my web server runs on is (include version):ubuntu 20.04

My hosting provider, if applicable, is:basil.arvixe.com

I can login to a root shell on my machine (yes or no, or I don't know):yes.

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):: certbot v1.29.0

Hi @psethi, and welcome to the LE community forum :slight_smile:

hmm...
Try reordering the parameters.
Move --http after all --domains

Also, there is no IP for: kcssoft.org
[HTTP authentication requires an HTTP site - which requires an IP address to reach]

5 Likes

ThanksI I had to add a wildcard dns record and that resolved the missing A record issue and I could get renewed certificates. The record took a long time to propagate adding to my woes.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.