I have installed Certbot on Mac to generate the certificate/key. I am able to install Certbot on my Mac successfully. Now I need to generate a certificate which I will distribute to different clients or companies which are authorised to connect my server. My server is made node.js. But I am not abl…

[image] Amit_Raj: Then how can I generate the certificate? You have to set the new TXT record value, wait long enough for the DNS provider to start serving it, and then have Let's Encrypt check it. Hopefully it only takes a few seconds or a few minutes, but I don't know how BigRock's systems…

A side note about propagation, Let’s Encrypt always asks the authoritative nameservers for a domain. This means you only need to wait for all of your provider’s nameservers to have it. You do not need to wait for it to globally propagate.

network.lemoney.in has a CNAME records, so we can not add TXT records for it. So how can I add the value which we are putting in the TXT records for generating the certificate?

As @mnordhoff explained, you aren’t adding a TXT to network.lemoney.in, where your CNAME record sits. You are creating a new TXT record on _acme-challenge.network.lemoney.in, which is a different/distinct DNS name to network.lemoney.in.

[image] _az: As @mnordhoff explained, you aren’t adding a TXT to network.lemoney.in, where your CNAME record sits. You are creating a new TXT record on _acme-challenge.network.lemoney.in, which is a different/distinct DNS name to network.lemoney.in. Thanks for your response!! Actually there …

[image] Amit_Raj: and added a TXT record for the ‘newtwork2.lemoney.in’ sub domain with the value which I got after running the following command [...] $ host -ttxt network2.lemoney.in network2.lemoney.in descriptive text "UVXLp8m6tWNoRiHWnG8ySZPQl0Bp7qc3YirJQ-Z-kLs" This is just the wro…

[image] bytecamp: This is just the wrong location, you have to put the TXT record on the name _acme-challenge.network2.lemoney.in. Thanks for your response!! What about first query?

[image] Amit_Raj: What about first query? If you cannot deploy the DNS record, you cannot retrieve a certificate via Let's Encrypt, unless you use http-01 authorization.

[image] Amit_Raj: I want to generate a Let’s encrypt certificate for sub domain ‘newtwork.lemoney.in’ and use it. And for generating this certificate I need to put a value in the TXT record, so when I went to add a TXT record for the ‘newtwork.lemoney.in’ domain yesterday, I came to know that I …

[image] mnordhoff: But can you create a TXT record for _acme-challenge.network.lemoney.in? I hope so, I will try it and get back to you.

Certificate is not being generated

Issuance Tech

danb35 March 13, 2018, 1:08pm 38

No. See:

Topic		Replies	Views
Failed authorization - DNS problem: NXDOMAIN looking up TXT Help	39	5293	August 8, 2022
Failed to use Let's Encrypt DNS challenge validation Help	11	11223	December 20, 2021
Certificate for external resource Help	18	1196	August 28, 2020
Not Secure after certificate was issued Help	46	1744	January 23, 2023
Type: unauthorized Detail: No TXT record found at _acme-challenge.<domain> Help	7	4810	March 25, 2020

Certificate is not being generated

Related topics