Let's Encrypt renewal fails with IPv6 AAAA record active

SYSTEM INFORMATION
OS type and version Ubuntu Linux 20.04.6
Webmin version 2.021
Virtualmin version 7.7
Related packages SUGGESTED

I solved this one myself. The auto-renewal of the Let’s Encrypt SSL certificate failed for one of my domains. I added a AAAA-record for that domain. The IPv6 address in it was correct. I tried to renew the certificate several times, but to no avail, I always got a certbot 404 error. Until I removed my AAAA-record, so that certbot was required to go IPv4. That worked.

Hi Bryce,

You’re indeed right. I edited my first post so it now contains the versions. I assume it has something to do with my VirtualHosts configuration, but not sure about that.

Kind regards,

Tom.

I’m pretty sure “Bryce_June” is ChatGPT or some other language model. We get multiple comments from spambots using LLMs daily…I block most of them. I’m not 100% sure this is one, so I haven’t deleted and blocked it yet…but I’d be very surprised if a human wrote that.

My goodness … And I just thought it was a friendly, non-native English speaker (just as me, by the way) that tried to help me out :-). Anyways, my first post is still valid though. No idea why my renewal failed when my AAAA-record is there. Any suggestions are more than welcome!

Do your AAAA checks work ok when testing on something like mxtools.

also found a debug tool.

https://letsdebug.net/

Hi Stefan,

I do not see how checking my MX records would help, so I skipped that test. I did however perform the letsdebug test, and it gave me a bright green result, saying (and this is funny): " All OK!

OK

No issues were found with (mydomain). If you are having problems with creating an SSL certificate, please visit the Let’s Encrypt Community forums and post a question there."

Which is exactly what I did! :blush:

Kind regards,

Tom.

mxtool does alot more the mx records, you will see a drop down after you the initial test, select aaaa records.

With lets debug did you view verbose information?


yous should see this

image

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.