Certificate Manager, CAA check not passing while it's properly configured

0

Hello,

I need a certificate for a domain that I'll keep secret sorry, but let's say

*.salon.foobar.fr

When I try to generate the certificate with CM I've got this error:

Enter image description here

When I check the CAA record for: test.salon.foobar.fr on this website (again remember, fake domain), https://caatest.co.uk/ I have this result:

Enter image description here

So everything looks good and AWS should be able to validate the domain. What's wrong ?

asked a year ago213 views
2 Answers
0

DNS changes can take some time to propagate. It might take up to 48 hours for the changes to be visible everywhere. If you've recently added or modified your CAA records, you might need to wait a bit before AWS can validate the domain. Use a DNS checking tool to make sure there are no errors with your DNS configuration. There are many free tools available online, such as Google's public DNS checker. Remember that CAA records apply to subdomains as well. If you're trying to issue a certificate for a subdomain and the parent domain has a CAA record, the subdomain will inherit that record unless it has its own CAA record. Make sure your CAA records are correctly configured for both the parent domain and any subdomains.

profile picture
EXPERT
answered a year ago
  • Thank you for the answer. The CAA record hasn't changed in several months so AWS should see them

0

I deleted all the CAA records from my DNS and it stills indicate the same problem. No CAA but CAA check failed ....

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions