ACM Certificate request with DNS validation fails immediately

0

As soon as I request a certificate for my domain or any subdomains, validation fails with an error requesting additional information. My domain is certainly nowhere close to Alexa's top 1000. The "Domains" section does not show me any CNAME records that I could enter in my DNS provider (Cloudflare). As instructed by the help center, I am creating a thread here. How can I get my domain ownership validated?

Tim
posta 7 mesi fa288 visualizzazioni
1 Risposta
0

You didn't mention your domain but wild guess is this might be because Cloudflare has CAA records setup for your domain that prevent AWS from issuing the cert.

From https://coady.tech/amplify-cloudflare-caa-error/

CAA records, also knows as Certification Authority Authorization records, are used to restrict which Certificate Authorities are allowed to issue certificates for your domain. In this instance it seems CloudFlare’s Universal SSL automatically created CAA records for the providers they use, including Let’s Encrypt, DigiCert, and others. When AWS Amplify attempts to issue you with a certificate their system will check your domain’s CAA records. If AWS isn’t listed then it will return an error.

You can verify this with your favorite DNS tool or using online services like https://toolbox.googleapps.com/apps/dig/#CAA/

profile picture
ESPERTO
Kallu
con risposta 7 mesi fa
  • Thanks for the suggestion. There weren't any CAA records on my domain. I tried to explicitly create the necessary CAA records, as per the article on coady.tech, but that did not help. If it helps, the domain is lllamnyp.su.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande