Hi all, I'm banging my head since days to get done renewal of my domains. Sample: My domain is: adopteunmanchot.com I ran this command: certbot certonly --dns-rfc2136 --dns-rfc2136-credentials /etc/bind/rfc2136/ini --dns-rfc2136-propagation-seconds 360 -d adopteunmanchot.com It produced this outp…

Full log from Unbound [image] Unbound_acme-challengeResult.txt Nextcloud - un lieu sûr pour toutes vos données Extract [image]

Okay. Your DNS servers are even messier than I saw earlier. Each of your servers responds with different results. And, you can partly see this using unboundtest (but also snip below). Using unboundtest.com and 1.16 I see a single TXT value response but only about 1 out of every 3 or 4 tries. Th…

What I said above can be seen in graphic form at https://dnsviz.net/d/_acme-challenge.adopteunmanchot.com/dnssec/ The dnsviz site tree looks nice for your root domain but not for _acme-challenge https://dnsviz.net/d/adopteunmanchot.com/dnssec/

So, forget about domain adopteunmanchot.com , I have other domains to renew. Reminder: 20 October 2023 renewal was done without any problem. This the output of another renew for a domain with DNS in the same state that 3 monthes ago. If you want you can also test tootai.net tic.alsace terek.biz jal…

Why does your _acme-challenge.tootai.net have so many TXT records? You should (must) remove older unused records as I described earlier. You can see on https://unboundtest.com that no TXT records are being seen. I am not sure why you see REFUSED but you should start by cleaning up the TXT records …

I modified DNS records for adopteunmanchot.com and now I receive for certbot certonly Incorrect TXT record "ozdHPrc8CYSfxsB71dlbXi1km9Z-BWvJIoLuG-HIrus" found at _acme-challenge.adopteunmanchot.com despite the fact that unboundtest shows record with 1.19 and 1.16 version For other domains "certbo…

[image] tootai: For other domains "certbot renew" still gives No TXT record found. Please give specific domain name example [image] tootai: I modified DNS records for adopteunmanchot.com and now I receive for certbot certonly Incorrect TXT record "ozdHPrc8CYSfxsB71dlbXi1km9Z-BWvJIoLuG-H…

Is there some reason you need to use your own nameservers? Because with all your DNS problems changing to a well-supported provider like Cloudflare might be easier.

Mike. My DNSs are messy at this time ONLY with TXT records and ONLY while trying to get Letsencrypt DNS renew working again ! Remember: was working like a charm since ages and would prefer to continue to use it insteed of http. Deadline is 18/01.

I was just about to post the info below the dashed line but I now see your DNS servers are responding SERVFAIL using 1.16 and 1.19. That is not acceptable. The test results from dnsviz are slightly different now too. I am not sure what more I could say anyway. I agree something has changed but I…

Dns-01 No TXT record found at _acme-challenge.domain.tld

Help

Topic		Replies	Views
Failed authorization procedure: No TXT record found at _acme-challenge Help	5	4834	November 27, 2020
Dns-01 challenge - something has changed Help	11	4460	January 2, 2020
DNS records not read correctly Help	32	1495	July 16, 2021
Dns-01 challenge not working for wildcard cert Server	24	9327	September 13, 2018
Certificate verification failure (Certbot doesn't reach our DNS server txt records) Help	18	1570	June 14, 2021

Dns-01 No TXT record found at _acme-challenge.domain.tld

Related topics