Skip to main content

Community

Community

Latest Posts

Re: DNS validation currently broken?
@Buypass Customer Support I did manage to get the certs eventually. A couple of the services are not mission critical - so I can try a force renew of those certs if that would be helpful?
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
@mkon Thanks for checking... The one successful validation I got via DNS, the probe came from 172.253.x.x - and it hit ns1.crc.id.au. When these domains fail, I see nothing hitting ns1, ns2 or ns3.…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
@mkon Annoyingly, while it worked for that domain, I'm trying another - and hitting the same problem - even though its using the same nameservers, certbot instance etc etc :…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
Well, I just set up to do a packet capture on all 3 DNS servers - ran the cert generation stuff once, saw nothing on any of the nameservers. Checked my command line on the packet dump,…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
Given this thread with a similar problem that does NOT have DNSSEC enabled, there goes that theory. https://community.buypass.com/t/35y3jpb/problem-validating-certain-subdomains @mkon Do you have any…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: Problem validating certain subdomains
@Benjamin Schäfer Thanks for confirming..... That blows one theory I had out of the water then.... I guess we can only wait for @Buypass Customer Support or @Buypass IT Operations to see if they can…
- Steven_Haigh
- 1 yr ago
- 1
- Questions
- Reported - view
Re: Problem validating certain subdomains
This sounds like what I'm seeing here: https://community.buypass.com/t/p8y3pma/dns-validation-currently-broken I was starting to think that it was DNSSEC based issue - but it doesn't look like your…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
@mkon That's strange... I altered the script to not return to certbot until it had a positive response from both 8.8.8.8 and 1.1.1.1 - and get the following:…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
@mkon Hi mate, Still no luck... The output from certbot: Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
As further to this, if I run the same commandset against the LetsEncrypt directory endpoint, things work straight away and a cert is issued. However, as updating a cert requires this device to reload…
- Steven_Haigh
- 1 yr ago
- Questions
- Reported - view
Re: DNS validation currently broken?
@Lise Ringvold Kristoffersen one of the internal only domains I use that I was attempting DNS validation on is capwap.crc.id.au
- Steven_Haigh
- 1 yr ago
- 1
- Questions
- Reported - view
DNS validation currently broken?

With re-validating certs, I managed to renew the certs using http-01 without issue, but anything that uses dns-01 as a validation seems to fail. The error certbot is getting is:…
- Steven_Haigh
- 1 yr ago
- 16replies
- 693
- Questions
- Answered
- Answered
Re: Future features
@mkon Thanks for the reply! I believe at the moment it is not possible to validate IPv6 only hosts. Is this on the roadmap at all?
- Steven_Haigh
- 1 yr ago
- 1
- Discussion
- Reported - view
Re: Future features
I have a couple of requests: 1) Respect the 'Must Staple' extensions for the certificate. I believe at the moment, the certificate is issued, but without stapling enabled - ie the option is silently…
- Steven_Haigh
- 1 yr ago
- Discussion
- Reported - view
Validation of IPv6 only server

I've tried to use ACME to generate a cert for a server that only has a public IPv6 IP address. The setup works fine, but the validation doesn't seem to happen.…
- Steven_Haigh
- 1 yr ago
- 1reply
- 191
- 1
- Questions
- Answered
- Answered

Back to top

Home

View all topics

Buypass Company Site