SERVFAIL looking up {A/MX} for joshharmon.me

[joshharmon]

Hi all,

My domain is: joshharmon.me

I ran this command: /usr/local/bin/caddy -log stdout -agree=true -conf=/etc/caddy/Caddyfile -root=/var/tmp -email [myusername]@gmail.com (Caddy webserver systemd startup command)

Attempting to fetch certificates during Caddy’s startup produced this output:

Error 400 - urn:acme:error:connection - DNS problem: SERVFAIL looking up A for www.joshharmon.me

Also received the same error, but MX instead of A and the non-www version of the domain instead, until I changed my account email to be my Gmail account.

My operating system is (include version): Ubuntu 16.10 x64

My web server is (include version): Caddy 0.9.3 (https://caddyserver.com)

My hosting provider, if applicable, is: DigitalOcean (server); FastMail (DNS/Mail)

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

When I run dig a +short wWw.jOshHarMon.me @ns1.messagingengine.com: 138.197.196.103

When I run dig mx +short jOsHharMoN.me @ns1.messagingengine.com:

20 in2-smtp.messagingengine.com. 10 in1-smtp.messagingengine.com.

I also get these same results when I query my domain’s info on http://viewdns.info/. If anyone has any advice, I’d really appreciate it since I’m about at my wit’s end here. I’m asking here since this error seems to me to indicate that LE is having trouble fetching DNS records for my domain, and that it’s not an issue on my server at this point.

Thanks in advance!

[pfg]

This appears to be an error with your DNSSEC configuration. Here's the result of running http://dnscheck.iis.se/ for your site:

Inconsistent security for joshharmon.me - DS found at parent, but no DNSKEY found at child.
The parent has a secure delegation to the child (indicated by DS RRset at the parent), but the child has no DNSKEY records. This is probably due to a previously signed zone that became unsigned without requesting the parent to remove the secure delegation.

[joshharmon]

Makes perfect sense. I’ll get that squared away and see if that fixes things! Thank you for your help!

Edit 7:36 PM PDT: It works now!