I originally posted this here but it turns out, I have a different problem. Since two days, i cannot create or renew any certificates for niyawe.de . (DNS problem: query timed out looking up TXT for _acme-challenge.aaaaaa.niyawe.de) While I can create new certificates for niyawe.tk. I use dehydrate…

[image] niyawe: Please fix that. [image] During secondary validation: No valid IP addresses found Help L…

Is there any chance you can post another pcap, not filtered by host if possible? In your previous one, there’s only two peers - your server and one AWS validation server. There should be 4 validation servers making an appearance (3 from AWS and 1 from Viawest). I acknowledge that you’ve said that …

Thanks. Don’t have any strong conclusions, though. Looks like all the validation servers can reach this nameserver. One weird thing is the [RST,ACK] at the end of every TCP conversation, but that just might be some NAT oddity - both peers are behind NAT. The other thing is that some of the DNS re…

Maybe Let’s Encrypt kills out of order packets for some reason?

I just replaced my 4096bit Zone Signing Key with a 2048bit-Key to reduce the size of the answer and now it works. So there is an undocumented size limit. And it only exists since a few days. Nice. Please fix that.

Query timeout with DNSSEC enabled

Help

Topic		Replies	Views
Dns query timeout but dns is up and working Help	9	1778	January 12, 2021
Unable to renew certificate Help	6	612	September 2, 2020
I need Help, cant renew certificate! Help	15	2403	January 3, 2019
Problem with Let's Encrypt DNS Servers? Issuance Tech	9	4242	May 2, 2017
DNS query timed out Help	41	17740	March 1, 2016

Query timeout with DNSSEC enabled

Related topics