Hello! I've successfully set up a custom certbot configuration and due to specifics of my certificate (several domains, some of which also should contain wildcards) I have to use DNS authentication since it is the only available option. And here s the caveat: I create the needed domain through my …

You will probably need to wait for more of a DNS expert than me. But, when checking the TXT record for a DNS challenge the Let's Encrypt servers check the authoritative name servers. Typically the delay is short (often just seconds) for the DNS provider to sync those. You can use the unboundtest.…

Who is your DNS provider? Several providers are notorious for using read-through caches on their public servers, but not implementing a write-through cache on their internal API. That means edits you make on their systems can usually take anywhere from 301 seconds (5minutes + 1 second) to 3601 sec…

I use Yandex 360 DNS , I don't know if it helps. And yes, it is my own script, AFAIK there is no plugin for Yandex

SO, I can see I can use GET request with unboundtest.com and it gives me the results in a text format (is it like a dig?) So is the format documented, should I parse it somehow or there are some more reliable way to get the content of TXT records?

Well, what you'd want to do in a script, rather than parsing unboundtest, is to query your authoritative DNS servers directly yourself, just like Let's Encrypt would do.

You might want to check out the post below. We recently helped someone with some Yandex problems. It has some unusual behavior [image] No TXT records found Help H…

[image] dredkin: I use Yandex 360 DNS , I don't know if it helps. Honestly, for this particular requirement, it is doing the opposite of helping. Are you able to switch to any other DNS service provider (DSP)? [any DSP that can handle TXT updates via API; and do them quickly will work bette…

[image] rg305: Honestly, for this particular requirement, it is doing the opposite of helping. Are you able to switch to any other DNS service provider (DSP)? Why?

[image] petercooperjr: Well, what you'd want to do in a script, rather than parsing unboundtest, is to query your authoritative DNS servers directly yourself, just like Let's Encrypt would do. Sorry but this was of course my first guess. And of course it didn't work, so that's when I introduc…

DNS authentication and timings

Help

rg305 May 1, 2022, 1:12am 10

As shown by the other post (No TXT records found - #2 by rg305), Yandex DNS isn't working as advertised.

Topic		Replies	Views
DNS challenge questions Help	12	930	May 21, 2024
Dns01 with OVH doesn't seems to work Issuance Tech	16	5341	July 25, 2017
DNS authorization fails randomly Help	8	936	December 8, 2020
DNS challenge isn't working as expected Help	4	2467	November 2, 2022
Retry TXT DNS verification Help	2	3148	July 11, 2018

DNS authentication and timings

Related topics