WARN Local HTTP DCV error ... does not resolve to any IPv

[Nicholas Hemley]

Hello folks,

Any pointers appreciated on this one since a LetsEncrypt certificate has failed to renew on the server due to local DCV failure.

I have read some of the other threads on a similar topic and my current hunch is that this is some kind of nameserver issue.

Any pointers appreciated since the certificate was previously issued ok, yet now is failing.

Thanks,
Nic

Log for the AutoSSL run for “user1”: Tuesday, January 29, 2019 9:41:37 AM GMT+0000 (Let’s Encrypt™)
9:41:37 AM AutoSSL’s configured provider is “Let’s Encrypt™”.
Checking websites for “user1” …
9:41:37 AM Analyzing “api.example.com” …
9:41:37 AM ERROR TLS Status: Defective
ERROR Certificate expiry: 1/28/19, 2:44 PM UTC (0.79 days ago)
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED).
9:41:37 AM Performing DCV (Domain Control Validation) …
9:42:01 AM WARN Local HTTP DCV error (api.example.com): “api.example.com” does not resolve to any IPv4 addresses on the internet.
9:42:17 AM WARN Local HTTP DCV error (www.api.example.com): “www.api.example.com” does not resolve to any IPv4 addresses on the internet.
9:42:33 AM WARN Local HTTP DCV error (mail.api.example.com): “mail.api.example.com” does not resolve to any IPv4 addresses on the internet.
9:42:49 AM WARN Local HTTP DCV error (cpanel.api.example.com): “cpanel.api.example.com” does not resolve to any IPv4 addresses on the internet.
9:43:05 AM WARN Local HTTP DCV error (webdisk.api.example.com): “webdisk.api.example.com” does not resolve to any IPv4 addresses on the internet.
9:43:21 AM WARN Local HTTP DCV error (webmail.api.example.com): “webmail.api.example.com” does not resolve to any IPv4 addresses on the internet.
9:43:37 AM ERROR Local DNS DCV error (api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
ERROR Local DNS DCV error (www.api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
ERROR Local DNS DCV error (mail.api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
ERROR Local DNS DCV error (cpanel.api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
ERROR Local DNS DCV error (webdisk.api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
ERROR Local DNS DCV error (webmail.api.example.com): The DNS query to “_cpanel-dcv-test-record.api.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=guM80FVhv1wIL8Zx7EidIngVYluNsN8VH8Cs9VefXGZqNWrKvrZhr2QpcHTxQ90p”.
9:43:37 AM Analyzing “api.example.com”’s DCV results …
9:43:37 AM ERROR Impediment: TOTAL_DCV_FAILURE: Every domain failed DCV.
9:43:37 AM The system has completed the AutoSSL check for “user1”.

 

[cPanelLauren]

Hello @Nicholas Hemley

You might try running

dig +trace domain.tld

or using something like intodns.com or leafdns.com to check the DNS for the domain. This is almost always a DNS specific issue.