Mailing List ecs-isp@2rosenthals.com Archived Message #762

From: "Massimo S." <ecs-isp@2rosenthals.com> Full Headers
Undecoded message
Subject: Re: [eCS-ISP] problem with a LE reissue and .top domain - Dnskey missing
Date: Tue, 18 Jun 2024 19:47:08 +0200
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>

It seems it was some issue to the .TOP domain authority
the issue seems to have gone away by itself :-)

massimo

Il 11/06/2024 09:59, Massimo S. ha scritto:
Hi all,

doing a reissue of a LE certificate it happens this (since some days ago):

uacme: the server reported the following error:
{
"type": "urn:ietf:params:acme:error:dns",
"detail": "DNS problem: looking up A for www.mydomain.top: DNSSEC: DNSKEY Missing; DNS problem: looking up AAAA for www.mydomain.top: DNSSEC: DNSKEY Missing",
"status": 400
}

this issue do not happens with .com .net .org and .it domains.

My ISP has contacted the domain authority's for "mydomain.top" to have some support
and we have already verify that the DNSSEC function is turned off.
My ISP has also tried to turn ON and after OFF again to see if the situation improves,
but without any improvement.

I use UACME for the reissue of LE certificates (i guess it's the only solution for /2),
anyway my ISP has done a test with certbot on linux and they get the same "DNSKEY Missing" problem.

Any hint?
Anyone had this problem too?

thanks

massimo


Subscribe: Feed, Digest, Index.
Unsubscribe
Mail to ListMaster