Dns-01 challenge in pending state

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

This is in the staging environment. The domain is: ssldcvtest.mywire.org

I ran this command:

nslookup -type=txt _acme-challenge.ssldcvtest.mywire.org

It produced this output:

Non-authoritative answer:
_acme-challenge.ssldcvtest.mywire.org text =

    "YjdkMWQyMzgyOWRjODBkYTg4NzIzODE5ZTk1MmMxYWU5Yzk5ZjllYzI2YjA0MjMxOTQ4NDZhOTBjYzNmYTcwOQ"

The DNS record has been setup and the GET as POST to the challenge URL has been completed many times. The order, authorization and challenge all return "pending" all the time. Only dns-01 challenge has been attempted.

Can someone assist me with looking up the logs and see why its always in "pending" state?

2

I figured it out. I was using NULL for payload instead of using "{}" when telling ACME that the challenge has been completed.

3 Likes
3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.