No valid IP address found

[rablampain]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:www.endoldpoliticsnow.org

I ran this command:# certbot --apache -d endoldpoliticsnow.org -d www.endoldpoliticsnow.org (as root)

It produced this output:Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.endoldpoliticsnow.org
http-01 challenge for endoldpoliticsnow.org
Enabled Apache rewrite module
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. endoldpoliticsnow.org (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for endoldpoliticsnow.org

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: endoldpoliticsnow.org
  Type: None
  Detail: No valid IP addresses found for endoldpoliticsnow.org
  root@nobla:~# nano /etc/hosts
  root@nobla:~# systemctl restart apache2
  root@nobla:~# certbot --apache -d endoldpoliticsnow.org -d www.endoldpoliticsnow.org
  Saving debug log to /var/log/letsencrypt/letsencrypt.log
  Plugins selected: Authenticator apache, Installer apache
  Obtaining a new certificate
  Performing the following challenges:
  http-01 challenge for www.endoldpoliticsnow.org
  http-01 challenge for endoldpoliticsnow.org
  Enabled Apache rewrite module
  Waiting for verification…
  Cleaning up challenges
  Failed authorization procedure. endoldpoliticsnow.org (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for endoldpoliticsnow.org

My web server is (include version):Apache/2.4.25 (Debian)

The operating system my web server runs on is (include version):debian 9

My hosting provider, if applicable, is:www.linode.com

I can login to a root shell on my machine (yes or no, or I don’t know):Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.28.0

[JuergenAuer]

Hi @rablampain

@rablampain

Failed authorization procedure. endoldpoliticsnow.org (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for endoldpoliticsnow.org

checking your domain you see: There is no valid ip address - https://check-your-website.server-daten.de/?q=endoldpoliticsnow.org

Host	T	IP-Address	is auth.	∑ Queries	∑ Timeout
endoldpoliticsnow.org	A		yes	1	0
	AAAA		yes
www.endoldpoliticsnow.org	A	139.162.23.155 Singapore//Singapore (SG) - LINODE Hostname: li865-155.members.linode.com	yes	1	0
	AAAA		yes

Your www has one, your non-www not.

So you can't create a certificate using http validation with the non www domain name.

Add an A record with the same ip address of your www version. Then recheck the domain to see, if your non-www has an A-record.

[rablampain]

Thank you for the fast reply.
How do I enter a “non-www”? Linode only accept “www” or “endoldpoliticsnow” (the domain name only). Is this correct for letsencrypt?

[JuergenAuer]

@rablampain

How do I enter a “non-www”?

I don't know, that's provider-specific, I don't use Linode. May be the field is empty, may be "@" is used.

Share a screenshot of that menu.

[rablampain]

Thanks again - will give it a try and post the result for others.