checkallsslcerts failing with "400 urn:ietf:params:acme:error:dns"

Symptoms

The checkallsslcerts script fails with an error similar to the following.

The system failed to validate domain control for the domain “host.domain.tld” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (DNS problem: SERVFAIL looking up CAA for domain.tld - the domain's nameservers may be malfunctioning)

Description

This error occurs when the DNS for the domain is pointed to the server but not configured.

Workaround

Add a DNS zone for the primary domain of the hostname:

/scripts/adddns --domain $DOMAIN --ip $IP

Replacing $DOMAIN with the domain name, and $IP with the IP address you want the domain to point to.

Additional resources

Add an A Entry for Your Hostname