Issue Let's Encrypt - DNS problem: query timed out looking up CAA

[Thraul]

I am having an issue with some domains returning the following error.

This happens when attempting to install or renew certificates with and without aliases.

I am running the following

Extension Version

Any help is appreciated.

Thanks.

 

[IgorG]

Let's Encrypt makes CAA1 queries, which fail.
Let's Encrypt validation system was not able to complete a DNS lookup for your domain. Most probably that DNS for domain is not correctly configured, or that the route between Let's Encrypt servers and your server has some network problems.

 

[Thraul]

Hi Igor,

I have done some testing and have found that DNS on my server is fine and I have it configured for this domain the same as all the others.

[root@web4 ~]$ cat /etc/resolv.conf
; generated by /sbin/dhclient-script
#search ait.local ambient-it.com.au
nameserver 8.8.8.8
nameserver 8.8.4.4

[root@web4 ~]$ dig tradesmenontime.com.au A

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.1 <<>> tradesmenontime.com.au A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54587
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;tradesmenontime.com.au. IN A

;; ANSWER SECTION:
tradesmenontime.com.au. 3599 IN A 223.252.6.13

;; Query time: 271 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Apr 24 13:10:05 2017
;; MSG SIZE rcvd: 56

Could be the route but I doubt it. How can I test this?

I also testing this against another server running Debian 8, Plesk 17 and Using googles DNS Server and it working fine.