SSL generation throwing some error for domain digitup.in
We have one of our domains digitup.in registered on AWS Route 53. We are trying to generate one SSL certificate for the same using let's encrypt SSL via Netlify hosting.
We are not able to generate the SSL for the same. We are getting the error shown in below attached file.
Kindly help me out to resolve this issue.
- Newest
- Most votes
- Most comments
You need to create a CAA record in your Route53 Zone as you do not have one currently so LetsEncrypt can verify you own the domain. https://caatest.co.uk/digitup.in
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#CAAFormat
https://docs.aws.amazon.com/acm/latest/userguide/setup.html#setup-caa
I see you have created the CAA record now.. Hopefully this resolves your issue.. If your creating a wildcard, you may need
issuewildinstead ofissueIf this helped resolve your question, id apprecaite it if you could accept the answer.
Thanks Gary
I have created the CAA record, still there is some error while creating the Let's Enrcypt SSL for digitup.in, I am doing all this using Netlify Hosting Services.
The error now I am getting is -
SniCertificate::CertificateNonvalidError: Unable to verify challenge for digitup.in: During secondary validation: DNS problem: SERVFAIL looking up CAA for digitup.in - the domain's nameservers may be malfunctioning
You have a new error
During secondary validation:
In secondary validation also, the it's related to CAA only. We have already created the CAA record for both the types - issue as well as issuewild.
What can be the reason for the this error?
The error I am getting is -
Acme::Client::Error::RateLimited: too many failed authorizations (5) for "digitup.in" in the last 1h0m0s, retry after 2024-11-11 11:02:52 UTC: see https://letsencrypt.org/docs/rate-limits/#authorization-failures-per-hostname-per-account
We can’t renew your Let’s Encrypt certificate automatically until the issue is resolved. Check our troubleshooting guide for more information on how to fix the problem, and then renew the certificate.
answered 2 years ago
Relevant content
asked 2 years ago
asked 2 years ago
- AWS OFFICIALUpdated 2 months ago
Even if we have created CAA record, still we are getting the error -
SniCertificate::CertificateNonvalidError: Unable to verify challenge for digitup.in: DNS problem: SERVFAIL looking up CAA for digitup.in - the domain's nameservers may be malfunctioning
We can’t renew your Let’s Encrypt certificate automatically until the issue is resolved. Check our troubleshooting guide for more information on how to fix the problem, and then renew the certificate.