Certificate Manager, CAA check not passing while it's properly configured

0

Hello,

I need a certificate for a domain that I'll keep secret sorry, but let's say

*.salon.foobar.fr

When I try to generate the certificate with CM I've got this error:

Enter image description here

When I check the CAA record for: test.salon.foobar.fr on this website (again remember, fake domain), https://caatest.co.uk/ I have this result:

Enter image description here

So everything looks good and AWS should be able to validate the domain. What's wrong ?

preguntada hace un año224 visualizaciones
2 Respuestas
0

DNS changes can take some time to propagate. It might take up to 48 hours for the changes to be visible everywhere. If you've recently added or modified your CAA records, you might need to wait a bit before AWS can validate the domain. Use a DNS checking tool to make sure there are no errors with your DNS configuration. There are many free tools available online, such as Google's public DNS checker. Remember that CAA records apply to subdomains as well. If you're trying to issue a certificate for a subdomain and the parent domain has a CAA record, the subdomain will inherit that record unless it has its own CAA record. Make sure your CAA records are correctly configured for both the parent domain and any subdomains.

profile picture
EXPERTO
respondido hace un año
  • Thank you for the answer. The CAA record hasn't changed in several months so AWS should see them

0

I deleted all the CAA records from my DNS and it stills indicate the same problem. No CAA but CAA check failed ....

respondido hace un año

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas