Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Getting Started

Reply

SSL certificate for domain but only allowed to provide a SSL certificate when the CAA is present

[ Edited ]
Techie
Posts: 9
1945     0

Hi,

 

We need to order a SSL certificate for domain e.g. selfcare-pre.onenet.onenet.de, when we do the request at the Certificate Authority (e.g. DigiCert) they will do a DNS query on this specific domain for the CAA record and are only allowed to provide a SSL certificate when the CAA record is present.

 

At this point only a CNAME record is present and what we need is that also a CAA record will be added to the domain (see highlighted entry).

 

;QUESTION

selfcare-pre.onenet.onenet.de. IN CAA

;ANSWER

selfcare-pre.onenet.onenet.de. 114 IN CNAME pdzmz27.x.incapdns.net.

selfcare-pre.onenet.onenet.de. 21599 IN CAA 128 issue "digicert.com"

 

may you advise us here ?

 

Regards and Thanks

Re: SSL certificate for domain but only allowed to provide a SSL certificate when the CAA is present

Techie
Posts: 9
1945     0

any ideas here ?

Showing results for 
Search instead for 
Did you mean: 

Recommended for You