time limit exceeded: last error: NS helium.ns.hetzner.de. returned SERVFAIL for _acme-challenge.farci.to.

[gmeghnag]

Welcome

• Yes, I'm using a binary release within 2 latest releases.
• Yes, I've searched similar issues on GitHub and didn't find any.
• Yes, I've included all information below (version, config, etc).

What did you expect to see?

I expect to see the command succeed.

What did you see instead?

lego --email XXXXXXXX@outlook.com --path=~/lego --dns hetzner --domains "farci.to" --dns.resolvers 8.8.8.8  --key-type rsa2048 -a run
...
2023/04/24 11:00:18 Could not obtain certificates:
	error: one or more domains had a problem:
[farci.to] time limit exceeded: last error: NS helium.ns.hetzner.de. returned SERVFAIL for _acme-challenge.farci.to.

How do you use lego?

Binary

Reproduction steps

lego --email XXXXXXXX@outlook.com --path=~/lego --dns hetzner --domains "farci.to" --dns.resolvers 8.8.8.8 --key-type rsa2048 -a run

Version of lego

lego --version
lego version dev darwin/amd64

Logs

lego --email XXXXXXXX@outlook.com --path=~/lego --dns hetzner --domains "farci.to" --dns.resolvers 8.8.8.8  --key-type rsa2048 -a run
2023/04/24 10:58:06 [INFO] [farci.to] acme: Obtaining bundled SAN certificate
2023/04/24 10:58:07 [INFO] [farci.to] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/222079978497
2023/04/24 10:58:07 [INFO] [farci.to] acme: Could not find solver for: tls-alpn-01
2023/04/24 10:58:07 [INFO] [farci.to] acme: Could not find solver for: http-01
2023/04/24 10:58:07 [INFO] [farci.to] acme: use dns-01 solver
2023/04/24 10:58:07 [INFO] [farci.to] acme: Preparing to solve DNS-01
2023/04/24 10:58:08 [INFO] [farci.to] acme: Trying to solve DNS-01
2023/04/24 10:58:08 [INFO] [farci.to] acme: Checking DNS record propagation using [8.8.8.8:53]
2023/04/24 10:58:10 [INFO] Wait for propagation [timeout: 2m0s, interval: 2s]
2023/04/24 10:58:10 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:12 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:14 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:16 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:18 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:20 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:22 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:24 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:27 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:29 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:31 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:33 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:35 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:37 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:39 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:41 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:43 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:45 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:47 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:49 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:51 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:53 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:55 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:57 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:58:59 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:01 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:03 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:05 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:07 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:09 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:11 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:13 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:15 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:17 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:19 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:21 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:23 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:25 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:27 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:29 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:31 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:33 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:35 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:48 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:50 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:52 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:54 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:56 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 10:59:58 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:00 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:02 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:04 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:06 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:08 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:10 [INFO] [farci.to] acme: Waiting for DNS record propagation.
2023/04/24 11:00:12 [INFO] [farci.to] acme: Cleaning DNS-01 challenge
2023/04/24 11:00:18 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/222079978497
2023/04/24 11:00:18 Could not obtain certificates:
	error: one or more domains had a problem:
[farci.to] time limit exceeded: last error: NS helium.ns.hetzner.de. returned SERVFAIL for _acme-challenge.farci.to.

Go environment (if applicable)

 go version && go env
go version go1.19.4 darwin/amd64

[ldez]

Hello,

you have a network issue when lego tries to do DNS calls.

It can be related to a firewall, a local DNS, etc.

[gmeghnag]

You are right, the same command succeeded from a cloud instance (I don't know what's wrong with my env since it is open).
Sorry for bothering you.

P.S.: lego is a wonderful tool, congratulations.

[leana8959]

Hello,

I'm having the same issue, how can I test why it times out ?

Using dig @1.1.1.1 [mydomain] I was able to see that my domain name points to the right IP address, and this was done on the server so it should be able to make DNS calls correctly.

I can also see TXT records with name _acme-challenge.[mydomain] being created on my cloudflare dashboard.

Thanks