Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trouble issuing certs with dns_simply.sh plugin #5148

Open
S-Groening opened this issue May 13, 2024 · 2 comments
Open

Trouble issuing certs with dns_simply.sh plugin #5148

S-Groening opened this issue May 13, 2024 · 2 comments

Comments

@S-Groening
Copy link

S-Groening commented May 13, 2024

Hi,

I'm new to using acme.sh with the dns_simply.sh plugin and I've run into an issue in relation to certificate issuance with Let's Encrypt.

I want to issue a certificate to a subdomain, but it keeps telling me that the plugin is unable to find the root zone. I've done the splitting of the $fulldomain as the plugin does it and everything splits correctly into $_domain and $_sub_domain, but for some reason the logging tells me that the plugin's trying to use $fulldomain as the root zone, which of course will fail...

The logging tells me the following on the format of the input, which is all correct:

[Mon May 13 12:58:58 BST 2024] Adding txt value: xQcnQq1oz7q-2SRT9DjzC2U6F5wTw4Wq5IrR3KxNeQY for domain: _acme-challenge.unifi.beidemaschinen.de

But right thereafter, the zone handling error occur and nothing goes through with Simply's DNS service, hence nothing passes the Let's Encrypt validation...

What am I doing wrong here?

Steps to reproduce

I installed the latest acme.sh version, entered my account information and ran the command:

./acme --issue --dns dns_simply -d unifi.beidemaschinen.de --debug 2

Debug log

debug.log

Copy link

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

@jda-live
Copy link

Any other insight into this, all of sudden the last 24 hours none of the domains setup with acme.sh will renew and cannot create net new letsencrypt certificates, I have tried everything I am capable of, but I get:

./acme.sh --issue -d artemis.direct -d .artemis.direct --challenge-alias ssl-certs.live --dns dns_gd --dnssleep 300
[Thu May 16 18:03:25 CDT 2024] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Thu May 16 18:03:25 CDT 2024] Multi domain='DNS:artemis.direct,DNS:
.artemis.direct'
[Thu May 16 18:03:25 CDT 2024] Getting domain auth token for each domain
[Thu May 16 18:03:27 CDT 2024] Getting webroot for domain='artemis.direct'
[Thu May 16 18:03:27 CDT 2024] Getting webroot for domain='*.artemis.direct'
[Thu May 16 18:03:27 CDT 2024] Adding txt value: MDvEOZ_U7Sxsp_wBouUPUpYMuG7Q8CtUOH86CjffWfk for domain: _acme-challenge.ssl-certs.live
[Thu May 16 18:03:28 CDT 2024] Adding record
[Thu May 16 18:03:28 CDT 2024] Added, sleeping 10 seconds
[Thu May 16 18:03:39 CDT 2024] The txt record is added: Success.
[Thu May 16 18:03:40 CDT 2024] Adding txt value: PvDCQyhkRSitpsRpDUeVsk4zVLV4SfnP79aG7O5DMM8 for domain: _acme-challenge.ssl-certs.live
[Thu May 16 18:03:41 CDT 2024] Adding record
[Thu May 16 18:03:41 CDT 2024] Added, sleeping 10 seconds
[Thu May 16 18:03:52 CDT 2024] The txt record is added: Success.
[Thu May 16 18:03:52 CDT 2024] Sleep 300 seconds for the txt records to take effect
[Thu May 16 18:08:54 CDT 2024] Verifying: artemis.direct
[Thu May 16 18:08:57 CDT 2024] artemis.direct:Verify error:DNS problem: NXDOMAIN looking up TXT for _acme-challenge.artemis.direct - check that a DNS record exists for this domain
[Thu May 16 18:08:57 CDT 2024] Removing DNS records.
[Thu May 16 18:08:57 CDT 2024] Removing txt: MDvEOZ_U7Sxsp_wBouUPUpYMuG7Q8CtUOH86CjffWfk for domain: _acme-challenge.ssl-certs.live
[Thu May 16 18:08:59 CDT 2024] Removed: Success
[Thu May 16 18:08:59 CDT 2024] Removing txt: PvDCQyhkRSitpsRpDUeVsk4zVLV4SfnP79aG7O5DMM8 for domain: _acme-challenge.ssl-certs.live
[Thu May 16 18:09:01 CDT 2024] Removed: Success
[Thu May 16 18:09:01 CDT 2024] Please add '--debug' or '--log' to check more details.
[Thu May 16 18:09:01 CDT 2024] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants