DNS records are not propergating across all zones

Application Performance DNS & Network
1

What is the name of the domain?

app.sportinsights.com.au

What is the issue you’re encountering

The DNS have been added for almost 100 days but now some are not propagating which is affecting SSL renewal.

What steps have you taken to resolve the issue?

Readd DNS, developer mode, clear cache. I’ve contacted support for the platform i use and they confirmed not all dns showing.

https://www.whatsmydns.net/#A/app.sportinsights.com.au
https://www.whatsmydns.net/#A/www.app.sportinsights.com.au

What feature, service or problem is this related to?

DNS records

2

that subdomain is not proxied

nor is that one

3

I need these to no be proxied, and that was not my question. I am asking why the DNS is not propagating to all zones.

4

The tool you’re using is uh…not good. If you search for google.com using that tool you will see failures for it as well… I assure you Google’s DNS is just fine.

What specific issue are you having with SSL renewal?

5

I am using a a platform called Ploi. Ploi support are saying the issues why it cannot renew the cert is due to propagation issues and referred me to that site. This is the error:

Saving debug log to /var/log/letsencrypt/letsencrypt.log Requesting a certificate for bet1.creativewebtech.com.au and www.bet1.creativewebtech.com.au

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: bet1.creativewebtech.com.au Type: unauthorized Detail: 154.26.155.74: Invalid response from http://bet1.creativewebtech.com.au/.well-known/acme-challenge/lzgmE2kxcVxtE6Alns5YBIh6rOGWfjXZ_2uSn14d3DU: 404

Domain: www.bet1.creativewebtech.com.au Type: unauthorized Detail: 154.26.155.74: Invalid response from http://bet1.creativewebtech.com.au/.well-known/acme-challenge/xeGNa3QOoIo5O9zST0w0foplGIdLQfE5UDrkvm8JnQQ: 404

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

6

Ploi support sent you to that site because it’s part of their standard (and bugged troubleshooting) methodology. Every domain I’ve ever tested on that site fails some DNS lookups. So it’s not useful or instructive.

Assuming your DNS is configured correctly for Ploi, the logs they shared with you show a 404 error. In this case a request was made to bet1.creativewebtech.com.au (a server managed by Ploi?) for the file /lzgmE2kxcVxtE6Alns5YBIh6rOGWfjXZ_2uSn14d3DU on the path .well-known/acme-challenge/.

The tool is looking for that file on that path and it was not found (hence the 404 error). The creation and placement of that file is done by the let’s encrypt tool running on that server to validate certificate issuance. That the file isn’t there (assuming your DNS is pointing ot the right server) is an issue for Ploi to fix.

That there are some red Xs on whatsmydns.net for your domain is a red herring. If the IP address is the correct one, the resolution of the failure for the file to be in the right place is somehting Ploi will need to resolve.

1 Like