The server could not connect to the client to verify the domain :: DNS problem: query timed out looking up CAA


#1

While generation SSL cerificates for expeditionautoworks.com on nginx server is says

Failed authorization procedure. expeditionautoworks.com (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: query timed out looking up CAA for expeditionautoworks.com
Client: expeditionautoworks_com:expeditionautoworks.com Failedexpertcarcare_com


#2

Hello,

Take a read of the following: https://letsencrypt.org/docs/caa/#timeout

It looks like your domain’s nameservers completely fail to give any response to CAA queries.

You will need to get the operator of those nameservers to fix the issue, or use different nameservers.

$ dig @page.inet7.com. expeditionautoworks.com caa

; <<>> DiG 9.10.3-P4-Ubuntu <<>> @page.inet7.com. expeditionautoworks.com caa                            
; (1 server found)                                  
;; global options: +cmd                             
;; connection timed out; no servers could be reached                                                    
20:26:42.995907 IP x1.55481 > 192.126.83.120.domain: 4837+ [1au] Type257? expeditionautoworks.com. (52) 
20:26:43.121358 IP x1.34810 > 192.126.83.120.hostmon: Flags [S], seq 3083414767, win 29200, options [mss 1460,sackOK,TS val 25401821 ecr 0,nop,wscale 7], length 0
z\20:26:47.995982 IP x1.55481 > 192.126.83.120.domain: 4837+ [1au] Type257? expeditionautoworks.com. (52)
20:26:52.996085 IP x1.55481 > 192.126.83.120.domain: 4837+ [1au] Type257? expeditionautoworks.com. (52)
^C
4 packets captured
4 packets received by filter
0 packets dropped by kernel

#3

Thank you so much for help.


#4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.