# certbot certonly -d delphi-real-estate.com,www.delphi-real-estate.com,mail.delphi-real-estate.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Error while running apachectl configtest. AH00526: Syntax error on line 64 of /etc/httpd/conf.d/carls-vhosts.conf: SSLCertificateFile: file '/…

[image] Quantum: I don’t understand what is wrong here. Your domain has some problems with DNSSEC: delphi-real-estate.com | DNSViz If you try to query it using DNSSEC-validating resolver (such as Google Public DNS), you'll get SERVFAIL errors. You can also use https://unboundtest.com/ , which…

I'd demonstrated that DNSSEC cannot be the problem, in my last post over here: [image] No Email x.509 Certs? Help D…

Google Public DNS is resolving servfails as well: # dig @8.8.8.8 delphi-real-estate.com A ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4 <<>> @8.8.8.8 delphi-real-estate.com A ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 7376 ;; …

I don’t understand what G**gle nor LetsEncrypt wants. I don’t know what more to do than to set it up correctly at a major DNS registrar, and exactly like I set up the other domains which got LE certs. It is simply not a DNSSEC problem, unless it’s that G**gle and LetsEncrypt -require- DNSSEC. And…

[image] Quantum: I don’t know what more to do than to set it up correctly at a major DNS registrar, and exactly like I set up the other domains which got LE certs. It is simply not a DNSSEC problem. @Quantum , but there IS a problem with DNSSEC at your domain. Nameservers for .com domain clai…

Hmm, my registrar sees it just fine using G**gle, but we can not. He’s looking into that. I’m in Seattle and you seem to be in Mountain View. Registrar is in Bryan, Texas, though my DNS has been up for several days. Sure enough, Mountain View is one of the last to know: https://www.whatsmydns.n…

[image] Quantum: Hmm, my registrar sees it just fine using G**gle, but we can not. He’s looking into that. As of a minute ago, the .com DNS and whois servers both believe the DS record exists, from my perspective. whatsmydns.net is just confirming which of its resolvers don't validate DNSSE…

Maybe I’ll have it sooner or later. Dallas sees it now. Hey, Brazil just got the word. Mountain View is still in the dark, lol. The last one… I don’t think whatsmydns is asking for DNSSEC - it’s asking for the A. dig @8.8.8.8 delphi-real-estate.com A ; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7 <<>> @…

To clear up any confusion - DS record is a bit different from the others, as it is placed inside parent zone (com in your case), instead of directly inside your zone (delphi-real-estate.com). This means it requires special handling by your domain registrar (just like with changing NS records). If y…

[image] mkwm: So, something clearly went wrong with disabling DNSSEC (DNSSEC: signedDelegation shouldn’t be there) I see. I’ve heard back from my registrar, and I don’t understand why delphi-real-estate.com was represented as DNSSEC (as opposed to the others), but to solve it he just turned …

"The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A"

Help

Quantum November 21, 2017, 7:52pm 3

I'd demonstrated that DNSSEC cannot be the problem, in my last post over here:

Topic		Replies	Views
DNS problem: SERVFAIL looking up A Help	24	4720	January 14, 2020
Fails with "SERVFAIL looking up A" Help	2	1397	April 19, 2017
DNS problem: SERVFAIL looking up A for www.rnelnet.com DNSSEC issue? Help	3	1523	August 14, 2019
Acme-client on OpenBSD 6.3 Help	12	3148	May 15, 2018
SERVFAIL looking up A for xxxxxx.com domain Help	3	3968	December 18, 2017

"The server could not connect to the client to verify the domain :: DNS problem: SERVFAIL looking up A"

Related topics