VirtualMin: Failed DNS Validation when request CERT attempted from Let's Encrypt Servers

I don’t have step by step for you.

Please a lot is on the web for free info about the parts DIBS did write.

Important in my eyes!

IF you have using possible external dns at your hoster i advise using that, then most of the time you have 2 or more nameservers ns1 and ns2 from them on different ip blocks!

2 things

  1. How do i add certificate to my subdomain “mail.superhost.gr”. Its this subdomain that is giving me the error when i try to request cert form LE. Why does it fail?
    2… Which entry do i have to delete from DNS configuation for superhost.gr to STOP pointing to mail.superhost.gr

I have added a pic for you to see. Please i need the configuration of superhost.gr to be correct in order for the SSL Cert to pass.
Is this correct? https://imgur.com/a/PaWGhEW

Important in my eyes!

IF you have using possible external dns at your hoster i advise using that, then most of the time you have 2 or more nameservers ns1 and ns2 from them on different ip blocks!

Can you PLEASE HELP ME install SSL Cert to “mail.superhost.gr”? Thats all i ask. Please tell me exactly what to do because its failing.

remove mail.domain and use domain as mail server, or skip encryption on email… why bother with that if you can’t fix/understand/read?
in anycase, unless you’re ready to do some heavy reading, better tell your admin or some pro, to setup virtualmin for you…

You mean that i should delete the entry for: “mail A 176.223.129.220”. Are you sure that line is NOT important to be there so the system knows what is the MX for the domain?

No while to much is wrong.

Please contact your hoster.

Aks or inform if they have in same package a dns service you can use , and take a start from there! ( using their nameservers and so on)
That is realy gona help you, not going any further with only one ip adress or in same block for 2 own nameservers makes no sense.

Please folow up advice from me AND DIBS , i gues we both don’t / can’t help if having not the right base …

So aks hoster if they can deliver or how you can use their DNS services!

ok i will do that and report back

@Nikos - I really do sympathise with you and your situation. The problem\issue with Virtualmin (and other panels) and Linux really is that it requires prerequisite knowledge. When this is missing - it gets really difficult to resolve issues as a person will try almost anything and everything when there are problems.

  1. What operating system (& version) are you running on this VPS? (Ubuntu, CentOS, etc.?)
  2. What are you wanting to do with this VPS? Host websites and their mail? Or just websites or just email?
  3. Are you running DNS (i.e. BIND) yourself or using the domain registrar’s DNS control panels?

The answer to question 3 - looks like you are running it yourself as ns1.superhost.gr & ns2.superhost.gr (both having the same IP) appear to be the nameservers set at https://www.papaki.com/el which looks like where you registered your domain. If this is the case - WHY have you done this? You only have 1 IP and it isn’t wise to have both nameservers on 1 IP. Who or what told you to set it this way?

Dibs

Hello Dibs and THANK YOU for understanding my frustrating situation.

  1. CentOS 7.6 Along with latest VirtualMin
  2. Host websites and their mail.
  3. I’am running it myself. All servers running from the same machine. I did this myself when i registered and bought the domain on papaki which asked me the nameservers for my domain and i provided them.t

2 questions please so to understand if things is set up properly for my domain, i need to know that, please bare with me.

My domain is superhost.gr along with VirtualMin

  1. What should i set the Hostname to be i.e. “secure.superhost.gr” or just “superhost.gr” Does it matter?

  2. Where should the PTR record point? Currently it points to “secure.superhost.gr”, but is this correct, or needs to be pointingto domain itself or perhaps the mail exchange which is “mail.superhost.gr”

Before going any further - login to your papaki portal for your domains and check if you can add A (and other) records there? I am 99.99% you can - but best to check. It may ask you to use their nameservers to do that. You should be able to check - without saving. i.e. cancel out at the end.

I bought the superhost.gr domain, BUT the only thing i can do is set the nameservers (ns1.superhost.gr & ns2.superhost.gr) in their CP.

Nikos,

According to papaki support pages;

you can use there DNS servers and maintain entries for A, CNAME, MX and other records (manually) there.

Here’s my advice and (as it’s free you may well ignore it, that usually happens with free advice):

At this point your server will only be accessible via external IP address - and that’s fine for now.

According to Wikipedia

A device with the hostname myhost in the parent domain example.com has the fully qualified domain name myhost.example.com. The FQDN uniquely distinguishes the device from any other hosts called myhost in other domains.

So decide on a hostname - server1 is fine. So is nikos. Even athens1 is fine. The domain name is superhost.gr which gives a FQDN of athens1.superhost.gr

Now go to Papaki and in the FreeDNS control panel create an A record for athens1.superhost.gr pointing it to the external IP. Then create a CNAME for www and point that to the A record. Once this has propagated you will be able to access the server by name - there will be nothing there. Most want a host -you can use the @ symbol and it should be fine. Then create a CNAME for www - that should be enough to get the basics going.

Then install Virtualmin GPL and DO NOT select or install BIND.

During the install - the hostname would be athens1 (or nikos1 or whatever you selected), the domain would be superhost.gr if asked and the FQDN would athens1.superhost.gr - understand the basic differences between these things, i.e.

hostname + domain name = FQDN
athens1 + superhost.gr = athens1.superhost.gr

Hopefully the above is crystal clear.

You would want Virtualmin to install

  • Apache
  • php
  • mySQL
  • Postfix
  • Dovecot

Basically most things apart from BIND.

At this point you should have a basic working and secure installation of Virtualmin.

Now you should be able to create a new VirtualServer for each of your other 3 domains enabling website & mail if required. Leave SSL alone for now. Do one domain 1st (say kidsclubpaidika.gr). Copy the website from your 1st server onto your 2nd one.

Go to Papaki’s control panel - and using their FreeDNS create and A record for that domain. Most want a host -you can use the @ symbol and it should be fine. Then create a CNAME for www - that should be enough to get the basics going.

Test the website and if all is well, then go back to Papaki and add an MX record for it - you will also need to add an SPF record in the 1st instance - where you are saying that the 2nd VPS’s IP address is allowed to send email for it. Test your email - outbound and inbound. Create a test user on this domain.

Once that is working - enable the SSL for it and using Virtualmin’s LE page - request a cert for

  • www.kidsclubpaidika.gr
  • kidsclubpaidika.gr
  • mail.kidsclubpaidika.gr

and if you’ve done everything you should have - it should provide the certificate without having to do anything further.

Then repeat for the other 2 domains - i.e., create virtual server, enable just http, create A & CNAME records, test it, enable mail, create MX record (test inbound & outbound), copy the website across, enable SSL, request the cert & test again.

Then once all domains are on the new server - kill the old one.

Indeed i have found the Free DNS Service of papaki.gr
Currenly one of my clients uploads pictures to its WooCommerce and i don’t want to distract himas he has a lot of work to do. I dont want him to complain again about his site not loading up/

If i disable BIND then i will have to enter records A, CNAME, MX for each domain right?
That would bring down the sites and i dont want that because i will here complains.

Can i maintain BIND for my clients only and for starters ONLY change superhost.gr DNS from BIND to papaki FreeDNS (dns1.papaki.gr & dns2.papaki.gr)

if i do these alternations ONLY for superhost.gr will the other websites maintain intact?

What happens if BIND is active and FreeDNS of papaki service is also active? what would that do to superhost.gr?

If you change superhost.gr to use Papaki’s DNS servers but leave the clients on BIND (i.e. your DNS) then you would need to add A records (or CNAMEs) for ns1.superhost.gr & ns2.superhost.gr on Papaki - which technically would require propagation. That may or may not result in downtime for your clients.

Looking at your other posts - your server does seem to have a few issues. A new VPS would probably be the best way forward. It may involve downtime, but you could discuss that with your client and look to switch over overnight as opposed to daytime there. Minimising the downtime.

Or purchase another domain like superhost1.gr and use that for the new VPS. You could use A records and have one point to the existing FQDN and another to the say server2.superhost.gr - and move domains slowly, leaving the Woocommerce one till last.

But the moment you want to resolve the issues with the existing VPS and still maintain uptime - as you appear to a novice - that’s going to get tricky.

Apologies if it’s not the answer you would like.

Dibs

I will make all chnages to the current VPS

I have enabled freedns on papaki.
a add A records for

www.superhost.gr
mail.superhost.gr
ftp.superhost.gr
secure.superhost.gr

Problem is that I don’t know what to enter for CNAME and MX please. it has 2 input fields on both and i dont know what to enter, i will post the pics.

https://imgur.com/a/0OixfHS
https://imgur.com/a/AbBkm5U

please QUICKLY DO TELL ME WHAT VALUES TO PUT THERE as seen in the pictures so for superhost.gr to propagate correctly!!!

May i please give you access on papaki.gr, for you to make the changes correct?

I’am afraid i will do something stupid if i enable papakis dns servers, mostly about the other sites NOT loading properly.

For starters i WILL ONLY MAKE CHNAGE TO DNS OF SUPERHOST.GR NOTHING ELSE.
but you said somethign about load or might not load, iam confused.

Could you please make the alternations correctly?

CNAMES are the subdomain.

  • www is a subdomain
  • mail is a subdomain (technically - but that might be best done with an A record)
  • ftp is a subdomain

so in the case of

A Record
Host Value
@ IP ADDRESS
mail.superhost.gr IP ADDRESS

CNAME
Host Value
www superhost.gr

MX
Host Value
@ mail.superhost.gr 10

Umm, thnaks for answering but still its not clear to me. What is ‘@’.

CNAME and MX have 2 input fields each and i’m still not sure what to enter there.

Please look at the photos and tell me what i need to enter to each field?
I only understood how to place A records, which is easy, just the name of the subdomain and then to the other field the ip address
https://imgur.com/a/0OixfHS
https://imgur.com/a/AbBkm5U

@ is a synonym for the root domain. Nikos - at the risk of saying it plainly, just put the damn thing in.

CNAME - in the code snippet I posted up there was a a “table” of 2 columns, what bit of the example did you not understand?

CNAME’s require a host\subdomain and a value - the 1st part is www and the second part is superhost.gr