I have stumbled upon another headache from the Lets Encrypt stable of problems.
I have built a new server and have been progressively migrating virtual hosts over to it from an older Debian 8 server.
If I create a new virtual host on the New Debian 9 server it requests and adds SSL certificates virtually instantly, and that is fantastic (No Problem there)
The problem I have is that when I request a new SSL certificate on one of the newly migrated virtual hosts I receive the following error:-
Validating configuration for domain.com ..
.. no problems found
Requesting a certificate for domain.com, www.domain.com, mail.domain.com, autoconfig.domain.com, autodiscover.domain.com from Let's Encrypt ..
.. request failed : Web-based validation failed : Failed to request certificate :
domain.com.au challenge did not pass: unknownHost :: No valid IP addresses found for domain.com.au
DNS-based validation failed : Failed to request certificate :
Gave up waiting for validation
This is however after I have modified the DNS records to contain the
records, as well as modifying the
/etc/apache2/sites-available/domain.com.conf to reflect these changes
then restarting both the Bind and Apache services.
I also checked to make sure that there was no web redirection set to redirect from http to https
and noticed that the
_acme-challenge.autodiscover.domain.com.au. 5 IN TXT Rd3_5WWQnnmgzEZNwxMFtnemV7rwSinJUCipJdrJQbU
appears in the dns zone, which to me would indicate that a successful DNS-based validation should occur
I have tried to look through the log files but have come up empty as I'm not sure what to look for to find the error.