Letsencrypt dns errors

jordivn

Verified User
Joined
Nov 4, 2016
Messages
62
Hi Guys,

I used letsencrypt for a few years without problems. But know (with the new dns challage) i get lots of errors on de renews.
It seems like the dns resolve doesn't work. Looking in the letsencrypt.sh it uses the google dns. But with dig of nslookup the domain does resolve fine.

Code:
 ./letsencrypt.sh renew scouting-malden.nl 4096
Requesting new certificate order...
Processing authorization for scouting-malden.nl...
Waiting for domain verification...
Trying again...
1..2..3..4..5..
Challenge status: invalid. Challenge error: "type": "http-01",  "status": "invalid",  "error": {    "type": "urn:ietf:params:acme:error:dns",    "detail": "DNS problem: SERVFAIL looking up A for scouting-malden.nl",    "status": 400  . Exiting...

I did remove de san_config to let it rebuild. I did remove the letsencrypt keys to, and rebuild letsencrypt (with custombuild).

Anyone any idea's?

Jordi
 
At least one name server failed to respond in a timely manner
Failure detail: 136.144.168.52

https://mxtoolbox.com/SuperTool.aspx?action=dns:scouting-malden.nl&run=toolpage

dns-sec.wes-server.nl

i hope for you the problem is not going dns sec ..... related where about 30% in Holland has (had) serious problems with?

Also with this tests some not resolved
https://dnschecker.org/#A/scouting-malden.nl

https://dnschecker.org/#NS/scouting-malden.nl

http://dnscheck.pingdom.com/?domain=scouting-malden.nl

SOA

Delivery over IPv4 to [email protected] could not be done.

Failed to deliver email for SOA RNAME of scouting-malden.nl (hostmaster.scouting-malden.nl) using [email protected].

DNSCheck failed to deliver email to the email address listed as the one responsible for the zone.


dns-sec.wes-server.nl.

Name server dns-sec.wes-server.nl (136.144.168.52) does not answer queries over UDP.

The name server failed to answer queries sent over UDP. This is probably due to the name server not correctly set up or due to misconfigured filtering in a firewall.

Name server dns-sec.wes-server.nl (136.144.168.52) does not answer queries over TCP.

https://mxtoolbox.com/domain/scouting-malden.nl/
 
Last edited:
@Ikkeben

Thanks! blijkbaar was mijn named gestopt op de secudaire dns... Hierdoor geen resolve.
Na het starten was het certificaat zo gefixed.
 
Back
Top